CVE-2020-4908: Infoleak

Published Dec 15, 2020

Updated

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system.

Other sources

IBM Financial Transaction Manager for SWIFT Services returns the product version and release information on the login dialog. This information could be used in further attacks against the system.

— IBM

Affected Software

1 affected component

IBM Financial Transaction Manager For Multiplatform=3.2.4

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6371260

Event History

Dec 15, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Dec 16, 2020

CVE Published

via MITRE·08:35 PM

Data Sourced

via MITRE·08:35 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6371260

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2020-4908.

What is the title of this vulnerability?

The title of this vulnerability is 'IBM Financial Transaction Manager for SWIFT Services returns the product version and release informa…'.

What is the severity of CVE-2020-4908?

The severity of CVE-2020-4908 is medium (5.3).

How does CVE-2020-4908 affect IBM Financial Transaction Manager for Multiplatforms?

CVE-2020-4908 affects IBM Financial Transaction Manager for Multiplatforms 3.2.4.

How can CVE-2020-4908 be exploited?

CVE-2020-4908 can be exploited by using the product version and release information obtained from the login dialog in further attacks against the system.