Man-in-the-Middle Vulnerability in IBM Financial Transaction Manager for SWIFT Services
CVE-2020-4905

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Financial Transaction Manager
Vendor
CVE Published:
16 December 2020

Summary

IBM Financial Transaction Manager for SWIFT Services version 3.2.4 is vulnerable to an information disclosure issue due to a man-in-the-middle attack. An attacker could exploit this vulnerability through SSL stripping techniques, potentially allowing unauthorized access to sensitive information transmitted over the network. It is critical to address this vulnerability to safeguard sensitive financial transactions and ensure the integrity of data communications.

Affected Version(s)

Financial Transaction Manager 3.2.4

References

https://www.ibm.com/support/pages/node/6371260
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/191109
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.