PT-2023-28220 · Ibm · Ibm Cics Tx Standard+2

Publicado 2023-11-02 · Atualizado 2023-11-09 · CVE-2023-42027

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard versions 10.1 through 11.1 IBM CICS TX Advanced version 10.1 IBM TXSeries for Multiplatforms versions 8.1 through 9.1

Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery.

Recommendations For IBM CICS TX Standard versions 10.1 through 11.1, update to a version that includes a fix for this issue. For IBM CICS TX Advanced version 10.1, update to a version that includes a fix for this issue. For IBM TXSeries for Multiplatforms versions 8.1 through 9.1, update to a version that includes a fix for this issue. As a temporary workaround, consider implementing additional security measures to prevent cross-site request forgery attacks until a patch is available.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-42027

Produtos afetados

Ibm Cics Tx Advanced

Ibm Cics Tx Standard

Ibm Txseries For Multiplatforms

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-42027 · Nota de Segurança
• https://ibm.com/support/pages/node/7063664 · Aviso do Fabricante
• https://t.me/cibsecurity/73499 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1720317960328249657 · Publicação no Twitter
• https://ibm.com/support/pages/node/7063659 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1720227630333796784 · Publicação no Twitter
• https://exchange.xforce.ibmcloud.com/vulnerabilities/266057 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-42027 · Aviso do Fabricante