Orta CVSS 6.2
CVE-2026-19267: Financial Transaction Manager: kritik işlevde kimlik doğrulaması eksik
Açıklama (NVD)
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (`CommandsResource.java:31`). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.
Özet bilgiler
- Ürün
- Ibm Financial Transaction Manager
- CVSS v3.1
- 6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,18 (yüzdelik 8)
- CWE
- CWE-306
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-financial-transaction-manager | 4.0.7.0 | — | 4.0.11.0 |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |
| ibm-financial-transaction-manager | 4.0.6.0 | 4.0.6.0 | — |