PT-2018-4598 · Ibm · Ibm Financial Transaction Manager (Ftm) For Ach Services+1

Publicado 2018-03-09 · Atualizado 2018-03-27 · CVE-2016-0275

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013

Description The issue allows local users to obtain sensitive information via vectors related to cacheable HTTPS responses.

Recommendations For IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, apply fix pack fp0013. For IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, apply fix pack fp0013. For IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, apply fix pack fp0013.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-0275

Produtos afetados

Ibm Financial Transaction Manager (Ftm) For Ach Services

Ibm Financial Transaction Manager (Ftm) For Corporate Payment Services

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-0275 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0275 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21977245 · Aviso do Fabricante