4.3
Moyenne
CVE-2022-34313 IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies
Description
IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. X-Force ID: 229449.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CICS TX | 11.1 | Pas de correctif indiqué |
Autres CVE de CICS TX
Les 11 CVE de CICS TX →
CVE-2022-34320
IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly…
5.9
Moyenne
CVE-2022-34317
IBM CICS TX 11.1 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2022-34318
IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim
5.4
Moyenne
CVE-2022-34316
IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by…
3.7
Faible