CVE-2021-39066: High severity ibm financial transaction manager swift services vulnerability
IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions. IBM X-Force ID: 215040.
Other sources
IBM Financial Transaction Manager does not invalidate session any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-39066?
CVE-2021-39066 is a vulnerability in IBM Financial Transaction Manager 3.2.4 that allows an attacker to steal authenticated sessions by using any existing session identifier.
What is the severity of CVE-2021-39066?
The severity of CVE-2021-39066 is high with a CVSS score of 8.8.
How does CVE-2021-39066 affect IBM Financial Transaction Manager?
CVE-2021-39066 affects IBM Financial Transaction Manager 3.2.4 by not invalidating sessions, allowing an attacker to steal authenticated sessions.
Is there a fix available for CVE-2021-39066?
Yes, IBM has provided fixes for CVE-2021-39066. Please refer to the IBM support page for more information.
Where can I find more information about CVE-2021-39066?
You can find more information about CVE-2021-39066 on the IBM X-Force ID 215040 and the IBM support page.