VulnerabilityModified

CVE-2023-50311

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

LOW 3.1EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

CVSS 3.1: 3.1 LOWCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.32% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-522
Affected: ibm/cics transaction gateway
Source: psirt@us.ibm.com

References

https://https://www.ibm.com/support/pages/node/7145418Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/273612
https://https://www.ibm.com/support/pages/node/7145418Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.