PT-2024-13897 · Ibm · Ibm Cics Transaction Gateway For Multiplatforms

Published 2024-10-23 · Updated 2024-11-05 · CVE-2023-50310

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM CICS Transaction Gateway for Multiplatforms versions 9.2 through 9.3

Description The issue concerns the transmission and storage of authentication credentials by the software, which uses an insecure method. This makes the credentials susceptible to unauthorized interception and/or retrieval.

Recommendations For versions 9.2 and 9.3, update to a version that uses a secure method for transmitting and storing authentication credentials. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2023-50310

Affected Products

Ibm Cics Transaction Gateway For Multiplatforms

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-50310 · Security Note
• https://ibm.com/support/pages/node/7145418 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-50310 · Vendor Advisory
• https://twitter.com/UndercodeNews/status/1853877730401534455 · Twitter Post
• https://t.me/cvenotify/100690 · Telegram Post
• https://twitter.com/CVEnew/status/1849046668093817147 · Twitter Post
• https://t.me/cvenotify/99162 · Telegram Post
• https://t.me/cvedetector/8682 · Telegram Post