CVE-2022-34314
EUVD-2022-3727014.11.2022, 19:15
IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | cics_tx | 11.1 |
| ibm | cics_tx | 11.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-732 - Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
References