SB2016021612 - Information disclosure in IBM Financial Transaction Manager

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2016021612

SB2016021612 - Information disclosure in IBM Financial Transaction Manager

Published: February 16, 2016 Updated: August 9, 2020

Security Bulletin ID SB2016021612
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Information disclosure (CVE-ID: CVE-2016-0231)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote authenticated user to gain access to sensitive information.

IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading exception details in error logs.


Remediation

Install update from vendor's website.

References