CVE-2022-43872

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Score

CVSS 3.1 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2022-12-20

Last modified

2025-04-16

Weaknesses

CWE-863

Affected products

• Financial Transaction Manager (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/239708
• https://www.ibm.com/support/pages/node/6848881