IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines (IBM). IBM CICS TX version 11.1 is vulnerable to an information disclosure vulnerability that stems from not setting security properties on authorization tokens or session cookies. An attacker could obtain cookie values through this vulnerability.