Security Bulletin: IBM Financial Transaction Manager for Digital Payments for Multi-Platform is vulnerable to SQL injection. (CVE-2019-4575)

Summary

Financial Transaction Manager has addressed the following vulnerability.

Vulnerability Details

CVEID:CVE-2019-4575
**DESCRIPTION:**IBM Financial Transaction Manager for Digital Payments for Multi-Platform is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166801 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Affected Product(s) |

Resolved by VRMF

|

Issue

|

Fix download link

—|—|—|—

Financial Transaction Manager for Digital Payments (DP) 3.2.0 - 3.2.9

|

3.2.10

|

111092

| FTM 3.2.10

Workarounds and Mitigations

None