CVE-2022-34320 - IBM CICS TX information disclosure

Back Back to CVE browser

HIGH

IBM CICS TX information disclosure

Published Nov 14, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.52%

Description

IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464.

Affected products

Vendor IBM Product Cics TX Default
unaffected
- Version
  11.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cics TX

unaffected

Version	Status	Constraints
11.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37276
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/229464
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6833204
vendor-advisoryPatchVendor Advisory
https://www.ibm.com/support/pages/node/6833206
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37276		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/229464		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6833204		vendor-advisoryPatchVendor Advisory
https://www.ibm.com/support/pages/node/6833206		vendor-advisoryPatchVendor Advisory