Cross-Site Request Forgery Vulnerability in IBM Financial Transaction Manager for SWIFT Services
CVE-2020-4904
4.3MEDIUM
Summary
IBM Financial Transaction Manager for SWIFT Services version 3.2.4 is susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw allows malicious actors to trick a trusted user into executing unauthorized actions. By exploiting this vulnerability, an attacker could potentially manipulate a user's transactions without their knowledge, compromising the integrity of financial operations.
Affected Version(s)
Financial Transaction Manager 3.2.4
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved