CVE-2022-43875

2022-12-2019:15:25

CWE-20

[email protected]

web.nvd.nist.gov

ibm

financial transaction manager

swift services

denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.9%

JSON

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations. IBM X-Force ID: 240034.

Affected configurations

Nvd

Node

ibmfinancial_transaction_managerMatch3.2.4swift_services

AND

ibmaixMatch-

ibmlinux_on_ibm_zMatch-

linuxlinux_kernelMatch-

VendorProductVersionCPE
ibmfinancial_transaction_manager3.2.4cpe:2.3:a:ibm:financial_transaction_manager:3.2.4:*:*:*:*:swift_services:*:*
ibmaix-cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
ibmlinux_on_ibm_z-cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	financial_transaction_manager	3.2.4	cpe:2.3:a:ibm:financial_transaction_manager:3.2.4:::::swift_services::
ibm	aix	-	cpe:2.3:o:ibm:aix:-:::::::*
ibm	linux_on_ibm_z	-	cpe:2.3:o:ibm:linux_on_ibm_z:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*