EUVD-2026-84893
GHSA-f29p-f2w4-v99c
Severity by source
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Adjacent passive sniffing of cleartext needs a traffic-path foothold (AV:A/AC:H); no scope change for passive disclosure (S:U); confidentiality-only (C:H, I:N/A:N).
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
3DescriptionCVE.org
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive information.
AnalysisAI
Cleartext transmission of sensitive information in IBM Financial Transaction Manager (FTM) for Red Hat OpenShift can expose financial transaction data to passive interception by an attacker who is positioned on the adjacent network path carrying the affected traffic. Only deployments where a sensitive channel lacks properly configured transport encryption (for example, TLS disabled or misconfigured) are exposed; where channels are protected end to end, the flaw does not arise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to occupy an adjacent network position on the traffic path used by IBM Financial Transaction Manager (FTM) for RedHat OpenShift (AV:A, not internet-remote), and requires that sensitive data is actually being transmitted in cleartext - i.e., a deployment where transport encryption (TLS) is absent or improperly configured for the affected channel. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a real but low-priority issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor fix; according to the advisory data the patch is available from IBM (https://www.ibm.com/support/pages/node/7288641), which is the primary remediation - patch status is 'Patch available per vendor advisory', and no exact fix version is specified in the data available here, so the advisory must be checked for the precise build level to install. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Patch available per vendor advisory; within 24 hours, identify all IBM Financial Transaction Manager for Red Hat OpenShift instances, determine which sensitive channels lack properly configured transport encryption such as TLS disabled or misconfigured, enforce TLS on any exposed channels, and restrict adjacent-network access because the vulnerability is unauthenticated per CVSS PR:N; within 7 days, apply the IBM vendor patch to affected FTM for Red Hat OpenShift deployments and verify that all sensitive channels are protected end to end with no cleartext transmission; within 30 days, complete patching across all environments, audit TLS configuration on every sensitive channel, and add configuration monitoring to prevent TLS disablement or misconfiguration from recurring.
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to ex
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remot
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2,
The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive j
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used
A flaw was found in rsync which could be triggered when rsync compares file checksums. Rated high severity (CVSS 7.5), t
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which mig
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows
cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitr
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today