Vulnerability identifier: #VU81235

Vulnerability risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-34162

CWE-ID:

Exploitation vector: Network

Exploit availability:

Vulnerable software:
IBM CICS TX Standard
Universal components / Libraries / Software for developers

Vendor:

Description

The vulnerability allows a remote attacker to hijack the victim's click actions and possibly launch further attacks.

The vulnerability exists due to improper restriction of rendered UI layers or frames. Remote attacker can hijack the victim's click actions and possibly launch further attacks.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

---

External links
http://www.ibm.com/support/pages/node/6608198
http://www.ibm.com/support/pages/node/6608196
http://exchange.xforce.ibmcloud.com/vulnerabilities/229332

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?