Remote Authentication Vulnerability in IBM Financial Transaction Manager for RedHat OpenShift
CVE-2026-18153

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Financial Transaction Manager (ftm) for Red Hat Openshift
Vendor
CVE Published:
22 September 2026

What is CVE-2026-18153?

IBM Financial Transaction Manager for RedHat OpenShift is vulnerable due to the implementation of hard-coded cryptographic keys and initialization vectors, allowing a remote authenticated attacker to exploit this flaw. The vulnerability could lead to unauthorized disclosure of sensitive information and enable attackers to forge authentication tags, posing significant risks to the integrity and confidentiality of financial transactions. Organizations using this product should assess their security posture and apply relevant patches as outlined in the provided advisory.

Affected Version(s)

Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 <= 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064

References

https://www.ibm.com/support/pages/node/7288641
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.