Improper access control in Financial Transaction Manager - CVE-2016-3060
Published: October 29, 2016 / Updated: August 9, 2020
Vulnerability identifier: #VU40063
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-3060
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated user to manipulate data.
Payments Director in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services, and Corporate Payment Services (CPS) 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.
Affected software
Financial Transaction Manager
How to mitigate CVE-2016-3060
Install update from vendor's website.