CVE-2017-1538: Infoleak

Published Oct 10, 2017

Updated

IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive information from an undocumented URL. IBM X-Force ID: 130735.

Affected Software

6 affected components

IBM Financial Transaction Manager Ach Services=3.0.2.0

IBM Financial Transaction Manager Ach Services=3.0.2.1

IBM Financial Transaction Manager Check Services=3.0.2.0

IBM Financial Transaction Manager Check Services=3.0.2.1

IBM Financial Transaction Manager Cps Services=3.0.2.0

IBM Financial Transaction Manager Cps Services=3.0.2.1

Event History

Oct 10, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1538?

CVE-2017-1538 is classified as a medium-severity vulnerability because it allows an authenticated user to access sensitive information.

How do I fix CVE-2017-1538?

To fix CVE-2017-1538, you should apply the latest security patches provided by IBM for Financial Transaction Manager.

Who is affected by CVE-2017-1538?

CVE-2017-1538 affects users of IBM Financial Transaction Manager for ACH Services version 3.0.2.0 and 3.0.2.1.

What type of vulnerability is CVE-2017-1538?

CVE-2017-1538 is a security vulnerability that involves unauthorized access to sensitive information via an undocumented URL.

Can CVE-2017-1538 be exploited remotely?

CVE-2017-1538 requires authentication, meaning that exploitation is possible only by authenticated users.