Vulnerability identifier: #VU81235

Vulnerability risk: Medium

CVSSv3.1: 5.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-34162

CWE-ID: CWE-1021

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
IBM CICS TX Standard
Universal components / Libraries / Software for developers

Vendor:

Description

The vulnerability allows a remote attacker to hijack the victim's click actions and possibly launch further attacks.

The vulnerability exists due to improper restriction of rendered UI layers or frames. Remote attacker can hijack the victim's click actions and possibly launch further attacks.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

---

External links
http://www.ibm.com/support/pages/node/6608198
http://www.ibm.com/support/pages/node/6608196
http://exchange.xforce.ibmcloud.com/vulnerabilities/229332

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.