PT-2018-4595
CVE-2016-0268
·
تاريخ النشر
2018-03-09
·
تاريخ التحديث
2018-03-26
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013
IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013
IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013
Description
The issue allows remote authenticated users to obtain sensitive information via crafted XML data, exploiting an XML external entity (XXE) vulnerability.
Recommendations
For IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later.
For IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later.
For IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾