CVE-2023-43018 IBM CICS TX privilege escalation
IBM CICS TX Standard and Advanced perform operations at excessive privilege levels, allowing attackers to escalate privileges or amplify other weaknesses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-43018?
CVE-2023-43018 is a medium-severity vulnerability in IBM CICS TX Advanced, published on 2 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 266163.
Which versions are affected by CVE-2023-43018?
It affects 1 product.
Products include Ibm Cics Tx.
How do I fix CVE-2023-43018?
No fix has been published for CVE-2023-43018 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-43018 being exploited?
There is no known exploitation of CVE-2023-43018 in the wild and no public exploit code.
Other vulnerabilities in IBM CICS TX Advanced
Sources
Also known as GHSA-jp5h-5fjw-cp86.