IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/6833170 | patch vendor advisory |
https://www.ibm.com/support/pages/node/6833166 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/229450 | vdb entry |