Medium · 5.3 CVE-2022-43872 EUVD-2022-46842GHSA-hxv9-v8xj-vcr2

IBM Financial Transaction Manager information disclosure

Published Dec 20, 2022 · Updated Apr 16, 2025 · Assigned by ibm

Vendor: IBM Product: Financial Transaction Manager

Description

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Affected products

Vendor	Product	Affected	Fixed
IBM	Financial Transaction Manager	3.2.4	—

References

https://www.ibm.com/support/pages/node/6848881 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239708 vdb-entry