CVE-2022-43875

EPSS 0.02%
Published 20.12.2022 19:15:25
Last modified 21.11.2024 07:27:19
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these authorizations.  IBM X-Force ID:  240034.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Financial Transaction Manager Version3.2.4 SwPlatformswift_services

   Ibm ≫ Aix Version-
   Ibm ≫ Linux On Ibm Z Version-
   Linux ≫ Linux Kernel Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.043

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
psirt@us.ibm.com	6.2	2.5	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.ibm.com/support/pages/node/6848881

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/240034

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2022-43875

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-43875

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-43875

EUVD