CVE-2023-33849

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-311

Affected software

Vendor	Product	Versions
IBM	TXSeries for Multiplatforms	8.1, 8.2, 9.1
IBM	CICS TX Standard	11.1
IBM	CICS TX Advanced	10.1, 11.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/257105VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7001687Vendor Advisory
https://www.ibm.com/support/pages/node/7001695Vendor Advisory
https://www.ibm.com/support/pages/node/7001697Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/257105VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/7001687Vendor Advisory
https://www.ibm.com/support/pages/node/7001695Vendor Advisory
https://www.ibm.com/support/pages/node/7001697Vendor Advisory

Timeline

Published: Jun 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-33856.5An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.CVE-2023-338507.5IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption CVE-2023-338514.9IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partit CVE-2023-338525.4IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow CVE-2023-338545.3IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user CVE-2023-338553.7Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-const CVE-2023-338575.3IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could CVE-2023-338595.3IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM X-Force ID: 257697.CVE-2023-33869.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 Camera Trap Tracking System allows CVE-2023-338605.3IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the CVE-2023-338616.5IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host a CVE-2023-338639.8SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffff