SB2016021611 - Information disclosure in IBM Financial Transaction Manager
Published: February 16, 2016 Updated: August 9, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2016-0232)
The vulnerability allows a remote authenticated user to gain access to sensitive information.
IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.
Remediation
Install update from vendor's website.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764
- http://www-01.ibm.com/support/docview.wss?uid=swg21976392