PT-2022-22125 · Ibm · Ibm Cics Tx

Published 2022-11-14 · Updated 2022-11-16 · CVE-2022-34316

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM CICS TX version 11.1

Description The issue concerns the failure to properly neutralize web scripting syntax in HTTP headers, which can be processed by web browser components.

Recommendations For IBM CICS TX version 11.1, update to a version that properly handles web scripting syntax in HTTP headers to prevent potential exploitation.

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

CWE-644

Related Identifiers

CVE-2022-34316

Affected Products

Ibm Cics Tx

References · 5

• https://ibm.com/support/pages/node/6833178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34316 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34316 · Vendor Advisory
• https://ibm.com/support/pages/node/6833176 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/229452 · Note