CVE-2022-34311

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the user's session due to insufficiently protected credentials. IBM X-Force ID: 229446.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
IBM	CICS TX Standard	11.1
IBM	CICS TX Advanced	11.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/229446VDB Entry
https://www.ibm.com/support/pages/node/6832928Vendor Advisory
https://www.ibm.com/support/pages/node/6832930Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/229446VDB Entry
https://www.ibm.com/support/pages/node/6832928Vendor Advisory
https://www.ibm.com/support/pages/node/6832930Vendor Advisory

Timeline

Published: Feb 12, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-343123.3IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447.CVE-2022-343133.1IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie value CVE-2022-343143.3IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.CVE-2022-343155.4IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu CVE-2022-343165.3IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser compone CVE-2022-343175.4IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu CVE-2022-343186.1IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web CVE-2022-343197.5IBM CICS TX 11.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. I CVE-2022-34326.7A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may al CVE-2022-343207.5IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IB CVE-2022-343218.2Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authenticati CVE-2022-343229.0Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the conte