CVE-2020-4904: CSRF

Published Dec 15, 2020

Updated

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Other sources

IBM Financial Transaction Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected Software

1 affected component

IBM Financial Transaction Manager For Multiplatform=3.2.4

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6371260

Event History

Dec 15, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Dec 16, 2020

CVE Published

via MITRE·08:35 PM

Data Sourced

via MITRE·08:35 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6371260

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-4904.

What is the severity of CVE-2020-4904?

The severity of CVE-2020-4904 is medium.

What is the description of CVE-2020-4904?

CVE-2020-4904 is a vulnerability in IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 that allows an attacker to execute malicious actions transmitted from a trusted user.

How can an attacker exploit CVE-2020-4904?

An attacker can exploit CVE-2020-4904 through cross-site request forgery, tricking a user into executing unauthorized actions on the website.

Is there a fix available for CVE-2020-4904?

Yes, IBM has provided a fix for CVE-2020-4904. Please refer to the IBM support page for more information.