Lucene search

PRIOn knowledge basePRION:CVE-2022-43872

HistoryDec 20, 2022 - 7:15 p.m.

Authorization

2022-12-2019:15:00

PRIOn knowledge base

www.prio-n.com

ibm financial transaction manager

authorization checks

http requests

technical information

ftm swift system

ibm x-force id

nvd

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

CPENameOperatorVersion
financial_transaction_managereq3.2.4

CPE	Name	Operator	Version
	financial_transaction_manager	eq	3.2.4

References

exchange.xforce.ibmcloud.com/vulnerabilities/239708

www.ibm.com/support/pages/node/6848881