PT-2022-5293 · Ibm · Ibm Cics Tx Standard+1

Published

2022-10-28

·

Updated

2024-10-10

·

CVE-2022-34310

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard and Advanced version 11.1
Description The issue is related to insufficient protection of service data, which could allow a remote attacker to gain unauthorized access to sensitive information. It is also noted that the software uses weaker than expected cryptographic algorithms, potentially allowing an attacker to decrypt highly sensitive information.
Recommendations For IBM CICS TX Standard and Advanced version 11.1, consider updating to a version that uses stronger cryptographic algorithms to mitigate the risk of exploitation. As a temporary workaround, restrict access to sensitive information and ensure that all data transmissions are securely encrypted. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Information Disclosure

Weakness Enumeration

CWE-327CWE-200

Related Identifiers

BDU:2022-06578
CVE-2022-34310

Affected Products

Ibm Cics Tx Advanced
Ibm Cics Tx Standard