CVE-2023-43018

2023-11-0300:15:12

CWE-269

CWE-250

[email protected]

web.nvd.nist.gov

ibm

cics tx

standard 11.1

advanced 10.1

11.1

vulnerability

privilege level

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

27.0%

JSON

IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 266163.

Affected configurations

Nvd

Node

ibmcics_txMatch10.1advanced

ibmcics_txMatch11.1advanced

ibmcics_txMatch11.1standard

AND

linuxlinux_kernelMatch-

VendorProductVersionCPE
ibmcics_tx10.1cpe:2.3:a:ibm:cics_tx:10.1:*:*:*:advanced:*:*:*
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:advanced:*:*:*
ibmcics_tx11.1cpe:2.3:a:ibm:cics_tx:11.1:*:*:*:standard:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cics_tx	10.1	cpe:2.3:a:ibm:cics_tx:10.1::::advanced:::
ibm	cics_tx	11.1	cpe:2.3:a:ibm:cics_tx:11.1::::advanced:::
ibm	cics_tx	11.1	cpe:2.3:a:ibm:cics_tx:11.1::::standard:::
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*