IBM CICS Transaction Gateway for Multiplatforms Improper Access Control Vulnerability Allowing Unrestricted File Transfer or Viewing

An improper access control vulnerability has been identified in IBM CICS Transaction Gateway for Multiplatforms, affecting versions 9.3 and 10.1. This vulnerability could allow users to transfer or view files due to inadequate access controls.

Impact

Exploitation of this vulnerability could lead to unauthorized file transfers or access to files, potentially exposing sensitive information.

Remediation

Users are advised to configure proper egress and ingress policies at either the POD or HOST level. Detailed instructions for implementing these policies can be found in the CICS Transaction Gateway for Multiplatforms documentation.