Incorrect default permissions in IBM CICS TX Advanced and IBM CICS TX Standard - CVE-2022-34314
Published: November 21, 2022
Vulnerability identifier: #VU69432
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-34314
CWE-ID: CWE-276
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to incorrect default permissions. A local user with access to the system can gain access to sensitive information.
Affected software
IBM CICS TX Advanced
IBM CICS TX Standard
IBM CICS TX Standard
How to mitigate CVE-2022-34314
Install updates from vendor's website.
IBM CICS TX Advanced - update to 11.1.0.0 ifix5
IBM CICS TX Standard - update to 11.1.0.0 ifix5
IBM CICS TX Standard - update to 11.1.0.0 ifix5