PT-2022-27038 · Ibm · Ibm Financial Transaction Manager

Published 2022-12-20 · Updated 2023-02-14 · CVE-2022-43872

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager version 3.2.4

Description The issue concerns incorrect authorization checks for certain HTTP requests, allowing unauthorized access to technical information, such as event log entries, about the FTM SWIFT system.

Recommendations For IBM Financial Transaction Manager version 3.2.4, update the software to a version that correctly implements authorization checks for all HTTP requests to prevent unauthorized access to technical information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2022-43872

Affected Products

Ibm Financial Transaction Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-43872 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43872 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/239708 · Vendor Advisory
• https://ibm.com/support/pages/node/6848881 · Vendor Advisory
• https://t.me/cibsecurity/55005 · Telegram Post