CVE-2020-5001: IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a…

PriorityP346high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.02%

59.6th percentile

IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	financial_transaction_manager	>= 3.2.0 < 3.2.7	3.2.7
ibm	financial_transaction_manager	3.2.0 – 3.2.7	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.