Lucene search

IbmCVELIST:CVE-2022-43875

HistoryDec 20, 2022 - 6:45 p.m.

CVE-2022-43875 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service

2022-12-2018:45:03

CWE-20

ibm

www.cve.org

ibm financial transaction manager

denial of service

vulnerability

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Financial Transaction Manager for SWIFT Services for Multiplatforms",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "3.2.4"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/240034

www.ibm.com/support/pages/node/6848881

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for CVELIST:CVE-2022-43875