PT-2018-13691 · Ibm · Ibm Financial Transaction Manager For Swift Services For Multiplatforms

Published 2018-10-04 · Updated 2019-10-09 · CVE-2018-1670

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for ACH Services for Multi-Platform version 3.0.2

Description The issue allows an authenticated user to obtain sensitive product configuration information from log files.

Recommendations For version 3.0.2, restrict access to log files to prevent unauthorized users from obtaining sensitive product configuration information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1670

Affected Products

Ibm Financial Transaction Manager For Swift Services For Multiplatforms

References · 5

• http://ibm.com/support/docview.wss?uid=ibm10731547 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10731549 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1670 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144946 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1670 · Security Note