PT-2023-11907
CVE-2020-4556
·
Published
2023-03-15
·
Updated
2023-03-22
Description by
CVSS 3.1
4.0
MediumMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Financial Transaction Manager for High Value Payments for Multi-Platform versions 3.2.0 through 3.2.10
Description
The issue allows web pages to be stored locally, which can then be read by another user on the system.
Recommendations
For versions 3.2.0 through 3.2.10, consider implementing access controls to restrict other users from reading locally stored web pages until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾