Man-in-the-Middle Vulnerability in IBM Financial Transaction Manager for SWIFT Services
CVE-2020-4905
5.9MEDIUM
Summary
IBM Financial Transaction Manager for SWIFT Services version 3.2.4 is vulnerable to an information disclosure issue due to a man-in-the-middle attack. An attacker could exploit this vulnerability through SSL stripping techniques, potentially allowing unauthorized access to sensitive information transmitted over the network. It is critical to address this vulnerability to safeguard sensitive financial transactions and ensure the integrity of data communications.
Affected Version(s)
Financial Transaction Manager 3.2.4
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved