IBM CICS TX Standard and Advanced Arbitrary Code Execution Vulnerability via Insecure Function Usage

A vulnerability allowing local users to execute arbitrary code has been identified in IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1. This issue arises from the use of inherently dangerous functions, specifically 'gets', which can lead to buffer overflows. The vulnerability is present in several different versions and ranges of the affected products.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to upgrade to IBM CICS TX Standard 11.1 or IBM CICS TX Advanced 10.1 or 11.1. The necessary fixes can be downloaded from IBM Fix Central.