CVE-2022-43872

IBM Financial Transaction Manager information disclosure

Medium · published December 20, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Published
2022-12-20T18:35Z
EPSS history
Timeline
  • 20 DEC 18:35Z
    IBM Financial Transaction Manager information disclosure
    cvelistv5