CVE-2022-43872

IBM Financial Transaction Manager information disclosure

CVSS 5.3 MEDIUMEPSS 0.5%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

20 Dec 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

IBM · Financial Transaction Manager

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/239708 https://www.ibm.com/support/pages/node/6848881