CVE-2020-4905: Medium severity IBM Financial Transaction Manager For Multiplatform vulnerability
IBM Financial Transaction Manager for SWIFT Services could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to to obtain sensitive information.
Other sources
IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to obtain sensitive information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4905?
CVE-2020-4905 is a vulnerability in IBM Financial Transaction Manager for SWIFT Services that allows a remote attacker to obtain sensitive information by exploiting a man-in-the-middle attack through SSL stripping.
What is the severity of CVE-2020-4905?
The severity of CVE-2020-4905 is medium with a CVSS score of 5.9.
Which version of IBM Financial Transaction Manager for Multiplatforms is affected by CVE-2020-4905?
IBM Financial Transaction Manager for Multiplatforms version 3.2.4 is affected by CVE-2020-4905.
How can an attacker exploit CVE-2020-4905?
An attacker can exploit CVE-2020-4905 by performing a man-in-the-middle attack and using SSL stripping to intercept and obtain sensitive information.
How can I fix CVE-2020-4905?
To fix CVE-2020-4905, IBM Financial Transaction Manager for SWIFT Services should be updated to a version that patches the vulnerability.