CVE-2022-43872

—

CVSS 3.1

5.3 medium

EPSS

<1%p41

Published

Dec 20, 2022 (Dec 20, 2022)

Modified

Jun 17, 2026

Description

IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) about the FTM SWIFT system. IBM X-Force ID: 239708.

Vendors: ibm
Products: financial transaction manager
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.