PT-2024-19353 · Ibm · Ibm Txseries For Multiplatforms

Published 2024-05-10 · Updated 2025-01-14 · CVE-2024-22345

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM TXSeries for Multiplatforms version 8.2

Description The issue concerns the transmission or storage of authentication credentials using an insecure method, making them susceptible to unauthorized interception and/or retrieval.

Recommendations For IBM TXSeries for Multiplatforms version 8.2, consider implementing a secure method for transmitting or storing authentication credentials to prevent unauthorized access. As a temporary workaround, restrict access to sensitive areas of the system that rely on these credentials until a more secure method is in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2024-22345

Affected Products

Ibm Txseries For Multiplatforms

References · 5

• https://ibm.com/support/pages/node/7150667 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/280192 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-22345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22345 · Security Note
• https://t.me/cvenotify/107375 · Telegram Post