CVE-2023-33848
MediumCVSS 4.9Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1, 11.1 may allow a privileged user to obtain highly sensitive information by enabling debug mode.
Risk Assessment
The risk associated with this vulnerability involves the potential exposure of confidential data, which could lead to serious security breaches within the organization.
Recommendation
It is recommended to disable debug mode and monitor privileged user access to minimize the risk of information disclosure.
Other vulnerabilities in IBM TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced
See all- CVE-2023-33847Low
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1 and 11.1 do not set the secure attribute on authorization tokens and session cookies. This may allow attackers to capture cookie values by sending an HTTP link to a user.
- CVE-2023-33849Low
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1 and 11.1 may transmit sensitive information in query parameters that could be intercepted using man-in-the-middle techniques.
Original NVD description (English source)
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode. IBM X-Force ID: 257104.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS