Lucene search
HistoryMar 10, 2023 - 9:15 p.m.
CVE-2020-5002
ibm
financial transaction manager
authentication
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.5%
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.
Affected configurations
Node
ibmfinancial_transaction_managerRange3.2.0–3.2.11cps_services
ORibmfinancial_transaction_managerRange3.2.0–3.2.11digital_payments
ORibmfinancial_transaction_managerRange3.2.0–3.2.11high_value
Related
cvelist
cvelist
CVE-2020-5002 IBM Financial Transaction Manager security bypass
2023-03-01 21:16:40
cve
cve
CVE-2020-5002
2023-03-10 21:15:10
prion
prion
Input validation
2023-03-10 21:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
46.5%
Related for NVD:CVE-2020-5002