| Vulnerability Name: | CVE-2022-34162 (CCN-229332) | ||||||||||||
| Assigned: | 2022-07-29 | ||||||||||||
| Published: | 2022-07-29 | ||||||||||||
| Updated: | 2022-08-06 | ||||||||||||
| Summary: | IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 229332. | ||||||||||||
| CVSS v3 Severity: | 6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) 5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
4.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
| ||||||||||||
| CVSS v2 Severity: | 5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
| ||||||||||||
| Vulnerability Type: | CWE-1021 | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2022-34162 Source: XF Type: UNKNOWN ibm-cics-cve202234162-clickjacking(229332) Source: XF Type: VDB Entry, Vendor Advisory ibm-cics-cve202234162-clickjacking (229332) Source: CCN Type: IBM Security Bulletin 6608196 (CICS TX Advanced) IBM CICS TX Advanced is vulnerable to a remote attacker hijacking the clicking action of a victim (CVE-2022-34162). Source: CONFIRM Type: Vendor Advisory https://www.ibm.com/support/pages/node/6608196 Source: CCN Type: IBM Security Bulletin 6608198 (CICS TX Standard) IBM CICS TX Standard is vulnerable to a remote attacker hijacking the clicking action of a victim (CVE-2022-34162). Source: CONFIRM Type: Vendor Advisory https://www.ibm.com/support/pages/node/6608198 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| BACK | |||||||||||||