PT-2023-28220 · Ibm · Ibm Cics Tx Standard+2

Published 2023-11-02 · Updated 2023-11-09 · CVE-2023-42027

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard versions 10.1 through 11.1 IBM CICS TX Advanced version 10.1 IBM TXSeries for Multiplatforms versions 8.1 through 9.1

Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery.

Recommendations For IBM CICS TX Standard versions 10.1 through 11.1, update to a version that includes a fix for this issue. For IBM CICS TX Advanced version 10.1, update to a version that includes a fix for this issue. For IBM TXSeries for Multiplatforms versions 8.1 through 9.1, update to a version that includes a fix for this issue. As a temporary workaround, consider implementing additional security measures to prevent cross-site request forgery attacks until a patch is available.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-42027

Affected Products

Ibm Cics Tx Advanced

Ibm Cics Tx Standard

Ibm Txseries For Multiplatforms

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-42027 · Security Note
• https://ibm.com/support/pages/node/7063664 · Vendor Advisory
• https://ibm.com/support/pages/node/7063659 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/266057 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42027 · Vendor Advisory
• https://t.me/cibsecurity/73499 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1720317960328249657 · Twitter Post
• https://twitter.com/CVEnew/status/1720227630333796784 · Twitter Post