CVE-2022-38705 - IBM CICS TX phishing

Back Back to CVE browser

MEDIUM

IBM CICS TX phishing

Published Nov 14, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.71%

Description

IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172.

Affected products

Vendor IBM Product Cics TX Default
unaffected
- Version
  11.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cics TX

unaffected

Version	Status	Constraints
11.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41274
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/234172
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6833216
vendor-advisoryPatchVendor Advisory
https://www.ibm.com/support/pages/node/6833218
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41274		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/234172		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6833216		vendor-advisoryPatchVendor Advisory
https://www.ibm.com/support/pages/node/6833218		vendor-advisoryPatchVendor Advisory