PT-2016-5348 · Ibm · Ibm Financial Transaction Manager

Publicado 2016-10-29 · Atualizado 2016-11-28 · CVE-2016-3060

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager (FTM) versions 3.0.0.x before fp0015 IBM Financial Transaction Manager (FTM) version 3.0.1.0 before iFix0002

Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Recommendations For IBM Financial Transaction Manager (FTM) versions 3.0.0.x before fp0015, apply fix pack fp0015. For IBM Financial Transaction Manager (FTM) version 3.0.1.0 before iFix0002, apply iFix0002.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-3060

Produtos afetados

Ibm Financial Transaction Manager

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-3060 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3060 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64064 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI67537 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI64063 · Aviso do Fabricante
• http://securityfocus.com/bid/92633 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21989060 · Aviso do Fabricante