CVE-2022-43872

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 65.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Financial Transaction Manager
Timeline
PublishedDec 20

Description

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
CVEList
IBM Financial Transaction Manager information disclosure↗2022-12-20
▶
GHSA
GHSA-hxv9-v8xj-vcr2: IBM Financial Transaction Manager 3↗2022-12-20
▶
CVE-2022-43872 (MEDIUM CVSS 5.3) | IBM Financial Transaction Manager 3 | cvebase.io