EUVD-2026-84960
GHSA-9w5f-mfhx-hww2
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Local low-privilege foothold needed (AV:L/PR:L), no interaction; command execution yields full C/I/A, but I assess S:U as impact stays within the FTM process context absent evidence of cross-component escape.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.
AnalysisAI
IBM Financial Transaction Manager (FTM) for Red Hat OpenShift contains a command execution flaw stemming from functionality being pulled in from an untrusted control sphere (CWE-829), so an attacker who already holds a low-privilege foothold in the OpenShift environment hosting the product can influence the untrusted source and cause arbitrary commands to run within the FTM process context. The attack is local (AV:L, PR:L, UI:N) - there is no unauthenticated or internet-facing path to the flaw - which limits exposure to environments that actually run the affected FTM build. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing local foothold in the OpenShift environment hosting IBM Financial Transaction Manager, with at least low-privilege access (AV:L, PR:L), and no user interaction (UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, 8.8) describes a locally-exploitable flaw requiring low privileges but no user interaction, with a scope change (S:C) driving the high base score despite the local attack vector. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is the vendor patch described in the IBM support advisory at https://www.ibm.com/support/pages/node/7288641, which is the authoritative source for the exact patched FTM for Red Hat OpenShift release level - apply that update and confirm the deployed image digest matches the fixed build, since no exact fix version is enumerated in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm which OpenShift clusters run IBM Financial Transaction Manager and capture the exact build and fix-pack level of each deployment, since exposure exists only where the affected build is installed; verify that only least-privilege service accounts, not cluster-admin or shared operator credentials, can reach the FTM namespace or its image and configuration sources, and review recent cluster audit logs for unexpected command execution or changes to FTM workload definitions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to ex
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5
Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remot
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2,
The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive j
The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used
A flaw was found in rsync which could be triggered when rsync compares file checksums. Rated high severity (CVSS 7.5), t
The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which mig
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows
cartridge_repository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitr
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today