CVE Vulnerabilities

CVE-2023-50311

Insufficiently Protected Credentials

Published: Mar 31, 2024 | Modified: Oct 23, 2024
CVSS 3.x
4.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Cics_transaction_gateway Ibm 9.2 (including) 9.2 (including)
Cics_transaction_gateway Ibm 9.3 (including) 9.3 (including)

Potential Mitigations

References

  • https://https://www.ibm.com/support/pages/node/7145418