Cleartext transmission of sensitive information in IBM TXSeries for Multiplatforms - CVE-2023-33849

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU77138

Cleartext transmission of sensitive information in IBM TXSeries for Multiplatforms - CVE-2023-33849

Published: June 9, 2023


Vulnerability identifier: #VU77138
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-33849
CWE-ID: CWE-319
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote attacker with ability to intercept network traffic can gain access to sensitive data.


Affected software

IBM TXSeries for Multiplatforms
IBM CICS TX Advanced
IBM CICS TX Standard

How to mitigate CVE-2023-33849

Install updates from vendor's website.

IBM TXSeries for Multiplatforms - addressed in versions 8.2.0.2, 9.1.0.2
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix17, 11.1.0.0 ifix10
IBM CICS TX Standard - update to 11.1.0.0 ifix10

External References

Related Security Bulletins