Lucene search

K
cve[email protected]CVE-2020-4906
HistoryDec 16, 2020 - 9:15 p.m.

CVE-2020-4906

2020-12-1621:15:13
CWE-922
web.nvd.nist.gov
17
2
ibm
ftm
swift
cve-2020-4906
web security
unauthorized access

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system.

Affected configurations

Vulners
NVD
Node
ibmfinancial_transaction_managerMatch3.2.4
VendorProductVersionCPE
ibmfinancial_transaction_manager3.2.4cpe:2.3:a:ibm:financial_transaction_manager:3.2.4:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Financial Transaction Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "3.2.4"
      }
    ]
  }
]

Social References

More

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Related for CVE-2020-4906