CVE-2022-43875

CWE-20 — Improper Input Validation3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 83.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Financial Transaction Manager FOR Swift Services FOR Multiplatforms IBM Financial Transaction Manager

Timeline

PublishedDec 20

Description

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.5 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/financial_transaction_manager_for_swift_services_for_multiplatforms3.2.4

▶NVDibm/financial_transaction_manager3.2.4

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-77qx-hf3m-p9qw: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3↗2022-12-20

▶

CVEList

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service↗2022-12-20

▶