PT-2018-13691 · Ibm · Ibm Financial Transaction Manager For Swift Services For Multiplatforms

Publicado 2018-10-04 · Atualizado 2019-10-09 · CVE-2018-1670

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.2

Description The issue allows an authenticated user to obtain sensitive product configuration information from log files.

Recommendations For version 3.0.2, restrict access to log files to prevent unauthorized users from obtaining sensitive product configuration information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1670

Produtos afetados

Ibm Financial Transaction Manager For Swift Services For Multiplatforms

Referências · 5

• http://ibm.com/support/docview.wss?uid=ibm10731547 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10731549 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1670 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144946 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1670 · Nota de Segurança