CVE-2022-43872

published 2022-12-20

CVE-2022-43872: IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	financial_transaction_manager	—	—

CWE-863