4.3
Medium
CVE-2022-34313 IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies
Description
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. X-Force ID: 229449.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CICS TX | 11.1 | No fix stated |
Other CVEs of CICS TX
The 11 CVEs of CICS TX →
CVE-2022-34320
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
5.9
Medium
CVE-2022-34317
IBM CICS TX 11.1 is vulnerable to cross-site scripting
5.4
Medium
CVE-2022-34318
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim
5.4
Medium
CVE-2022-34316
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by…
3.7
Low