PT-2023-11907 · Ibm · Ibm Financial Transaction Manager For Digital Payments

Published 2023-03-15 · Updated 2023-03-22 · CVE-2020-4556

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager for High Value Payments for Multi-Platform versions 3.2.0 through 3.2.10

Description The issue allows web pages to be stored locally, which can then be read by another user on the system.

Recommendations For versions 3.2.0 through 3.2.10, consider implementing access controls to restrict other users from reading locally stored web pages until a patch is available.

Fix

Related Identifiers

CVE-2020-4556

Affected Products

Ibm Financial Transaction Manager For Digital Payments

References · 5

• https://ibm.com/support/pages/node/6962117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4556 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/183329 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4556 · Vendor Advisory
• https://t.me/cibsecurity/60075 · Telegram Post