CVE-2022-43872

EPSS 0.49%
Veröffentlicht 20.12.2022 19:15:24
Zuletzt bearbeitet 21.11.2024 07:27:18
Erkennungen
Login

IBM Financial Transaction Manager information disclosure

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Financial Transaction Manager Version 3.2.4 SwPlatform swift_services

   Ibm ≫ Aix Version -
   Ibm ≫ Linux On Ibm Z Version -
   Linux ≫ Linux Kernel Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.382

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://exchange.xforce.ibmcloud.com/vulnerabilities/239708

Vendor Advisory

VDB Entry

https://www.ibm.com/support/pages/node/6848881

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-43872

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-43872

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-43872

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-43872