Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-19267 EUVD-2026-85358GHSA-h5cj-2gph-734f

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by ibm

Vendor: IBM Product: Financial Transaction Manager (FTM) for RedHat OpenShift

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.

Affected products

VendorProductAffectedFixed
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 – ≤ 4.0.10.0 —

References