CVE-2026-17620

Published: Sep 22, 2026Modified: Oct 15, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected (8)

Products: Ibm: Financial Transaction Manager

Ibm

1 product

Financial Transaction Manager

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Financial Transaction Manager	4.0.7.0 ≤ version < 4.0.11.0
Ibm Financial Transaction Manager	Version 4.0.6.0
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_1
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_2
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_3
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_4
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_5
Ibm Financial Transaction Manager	Version 4.0.6.0 interim_fix_6

Running on/with	Platform Versions
Redhat Openshift	All versions

Related CWEs

CWE-523

Unprotected Transport of Credentials

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

References (1)

https://www.ibm.com/support/pages/node/7288641

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.