IBM TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced vulnerabilities
3 known CVE vulnerabilities in IBM TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced, translated and rated.
- CVE-2023-33847Low
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1 and 11.1 do not set the secure attribute on authorization tokens and session cookies. This may allow attackers to capture cookie values by sending an HTTP link to a user.
- CVE-2023-33849Low
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1 and 11.1 may transmit sensitive information in query parameters that could be intercepted using man-in-the-middle techniques.
- CVE-2023-33848Medium
IBM TXSeries for Multiplatforms versions 8.1, 8.2, 9.1, and CICS TX Standard and Advanced versions 10.1, 11.1 may allow a privileged user to obtain highly sensitive information by enabling debug mode.