Cross-site request forgery in IBM CICS TX Advanced - CVE-2022-34161

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU65909

Cross-site request forgery in IBM CICS TX Advanced - CVE-2022-34161

Published: August 1, 2022


Vulnerability identifier: #VU65909
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-34161
CWE-ID: CWE-352
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.


Affected software

IBM CICS TX Advanced
IBM CICS TX Standard

How to mitigate CVE-2022-34161

Install updates from vendor's website.

IBM CICS TX Standard - update to 11.1.0.0 ifix3

External References

Related Security Bulletins