CVE-2020-4908

CVSS 5.3 MEDIUMEPSS 1.1%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

16 Dec 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system.

CVSS:3.0/I:N/A:N/C:L/PR:N/S:U/AC:L/AV:N/UI:N/RL:O/RC:C/E:U

Affected products

IBM · Financial Transaction Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/191113 https://www.ibm.com/support/pages/node/6371260