CVE-2026-18181: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.
Other sources
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Financial Transaction Manager (FTM) for RedHat OpenShiftto a version that resolves this vulnerability.Fixed in 4.0.11.0
Event History
Frequently Asked Questions
What does an attacker need in order to exploit this issue?
The issue is described as remotely exploitable. No prerequisite access, authentication requirement, or additional exploit conditions are provided in the available data.
What is the potential impact of successful exploitation?
A remote attacker could bypass authentication and access sensitive information. The available data does not specify which information or application components are exposed.