CVE-2020-4906

CVSS 4 MEDIUMEPSS 0.3%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

16 Dec 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.

CVSS:3.0/PR:N/C:L/A:N/I:N/UI:N/AV:L/AC:L/S:U/E:U/RC:C/RL:O

Affected products

IBM · Financial Transaction Manager

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/191110 https://www.ibm.com/support/pages/node/6371260