Security Bulletin: Financial Transaction Manager for Digital Payments is affected by a potential SQL Injection CVE-2020-4328

Summary

Financial Transaction Manager for Digital Payments (FTM DP) for Multi-Platform has addressed the following vulnerability. SQL Injection on some of the screens.

Vulnerability Details

CVEID:CVE-2020-4328
**DESCRIPTION:**IBM Financial Transaction Manager is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Base score: 6.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/177839 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)

Affected Products and Versions

Remediation/Fixes

Affected Product(s) |

Resolved by VRMF

|

Issue

|

Fix download link

—|—|—|—

Financial Transaction Manager for Digital Payments (DP) 3.2.0 - 3.2.9

|

3.2.10

|

111092

| FTM 3.2.10

Workarounds and Mitigations

None