PT-2024-29549 · Ibm · Ibm Txseries For Multiplatforms

Published 2024-11-01 · Updated 2024-11-15 · CVE-2024-41741

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM TXSeries for Multiplatforms version 10.1

Description The issue allows an attacker to determine valid usernames due to an observable timing discrepancy, which could be used in further attacks against the system.

Recommendations For IBM TXSeries for Multiplatforms version 10.1, consider implementing measures to mitigate the observable timing discrepancy, such as introducing random delays or masking the timing differences in authentication responses. As a temporary workaround, consider restricting access to sensitive areas of the system that rely on username authentication until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

CWE-208

Related Identifiers

CVE-2024-41741

Affected Products

Ibm Txseries For Multiplatforms

References · 8

• https://ibm.com/support/pages/node/7174572 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41741 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41741 · Security Note
• https://t.me/cvenotify/101750 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1852531609926291824 · Twitter Post
• https://twitter.com/CVEnew/status/1852393597758517426 · Twitter Post
• https://t.me/cvedetector/9625 · Telegram Post
• https://twitter.com/UndercodeNews/status/1857267975583076604 · Twitter Post