CVE-2014-0831

Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...

CVE-2014-0833

IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 is affected by CVE-2014-0833 where the OAC component does not properly enforce operator-intervention requirements, allowing an authenticated remote user to bypass intended access restrictions via an unspecified process step. The affected ...

CVE-2014-0833

The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...

CVE-2014-0832

IBM Financial Transaction Manager 2.0/2.1 OAC contains cross-site scripting vulnerabilities in the configuration-details screens. Root cause: injected JavaScript/HTML via crafted text values; impacts authenticated users viewing those records. CVSS base 3.5. Affected: FTM 2.0 (and 2.1). Remediatio...

CVE-2014-0832

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...

PT-2014-3874

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 IBM Financial Transaction Manager FTM versions 2.1 through 2.1.0.0 Description The issue allows remote authenticated users to read arbitrary files via a modified pathname due t...

PT-2014-3877

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 Description The issue concerns the OAC component in IBM Financial Transaction Manager FTM, where it fails to properly enforce operator-intervention requirements. This allows...

PT-2014-3875

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of arbitrary users for requests that modify configuration dat...

CVE-2014-0830: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...

CVE-2014-0831: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...

CVE-2014-0833: Undefined Security Weakness

The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...

PT-2014-3876

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the OAC component's configuration-details screens. These vulnerabilities allow remote...

CVE-2014-0832: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...

Microsoft Windows KTM Invalid Free With Reused Transaction GUID

Microsoft Windows KTM Invalid Free with reused transaction GUID ---------------------------------------------------------------------------- CVE-2010-1889 The Kernel Transaction Manager ktm was introduced in Windows Vista and has been included in subsequent versions of Windows. Microsoft describe...