CVE-2021-39066

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040...

CVE-2021-39044

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210...

Cross site request forgery (csrf)

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210...

Session fixation

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040...

CVE-2021-39066

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040...

CVE-2021-39066

Summary: CVE-2021-39066 affects IBM Financial Transaction Manager for SWIFT Services (multiplatform) version 3.2.4. The vulnerability arises because the product does not invalidate an existing session after certain events, enabling an attacker to hijack an authenticated session. This is documente...

CVE-2021-39044

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210...

IBM Financial Transaction Manager 跨站请求伪造漏洞

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report on financial payments and transactions.IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery,...

CVE-2021-39066: Session Fixation

IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040...

PT-2022-10870

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.2.4 Description The issue allows an attacker to steal authenticated sessions because it does not invalidate any existing session identifier. Recommendations For IBM Financial Transaction Manager...

PT-2022-10862

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.2.4 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations For IBM...

IBM Financial Transaction Manager 授权问题漏洞

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report financial payments and transactions. IBM Financial Transaction Manager 3.2.4 contains an authorization issue vulnerability tha...

CVE-2021-39044: Cross-Site Request Forgery (CSRF)

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210...

Security Bulletin: Cross-site scripting and session fixation vulnerability in IBM Financial Transaction Manager for SWIFT Services

Summary Cross-site scripting and session fixation vulnerability in IBM Financial Transaction Manager for SWIFT Services Vulnerability Details CVEID: CVE-2021-39044 DESCRIPTION: IBM Financial Transaction Manager is vulnerable to cross-site request forgery which could allow an attacker to execute...

CVE-2021-39044

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 214210...

Security Bulletin: Financial Transaction Manager is affected by a vulnerability in Apache log4j (CVE-2021-44228)

Summary A vulnerability was identified within the Apache Log4j library that is used by IBM Financial Transaction Manager to provide logging functionality. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to...

IBM Financial Transaction Manager Cross-Site Scripting Vulnerability (CNVD-2021-71255)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation. A cross-site scripting vulnerability exists in IBM Financial Transaction Manager, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

CVE-2021-29841

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045...

CVE-2021-29841

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045...

Cross site scripting

IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045...