CVE-2022-43872: IBM Financial Transaction Manager information disclosure
IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.
Other sources
IBM Financial Transaction Manager authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43872?
The severity of CVE-2022-43872 is medium with a severity value of 5.3.
What is the impact of CVE-2022-43872?
CVE-2022-43872 allows unauthorized access to technical information about the FTM SWIFT system.
How can I check if I am affected by CVE-2022-43872?
You are affected by CVE-2022-43872 if you are using IBM Financial Transaction Manager 3.2.4 for SWIFT Services for Multiplatforms.
How can I fix CVE-2022-43872?
To fix CVE-2022-43872, update IBM Financial Transaction Manager to a version that addresses the authorization checks issue.
Where can I find more information about CVE-2022-43872?
You can find more information about CVE-2022-43872 on the IBM X-Force website and the IBM support page.