What is the CVSS score of EUVD-2026-84968?

EUVD-2026-84968 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-84968?

Yes, a patch is available for EUVD-2026-84968. Update the affected software to the latest version immediately.

IBM FTM EUVD-2026-84968

| CVE-2026-17620 MEDIUM

Unprotected Transport of Credentials (CWE-523)

2026-09-22 ibm

GHSA-gh73-p5gm-3gvw

Information Disclosure IBM Red Hat Financial Transaction Manager Ftm For Redhat Openshift

5.3

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

5.3 MEDIUM

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

5.3 MEDIUM

Passive interception on an adjacent segment (AV:A) requires being on the traffic path and capturing it (AC:H); no auth or interaction; confidentiality-only disclosure of cleartext data.

3.1 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorVendor: ibm

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 22, 2026 - 22:06 vuln.today

DescriptionCVE.org

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

AnalysisAI

IBM Financial Transaction Manager for Red Hat OpenShift transmits sensitive or security-critical data in cleartext across a communication channel, allowing an attacker who is already positioned on an adjacent network segment to sniff and read that data. Affected releases span 4.0.6.0 through 4.0.10.0, including the 4.0.6.0.0.6.0 Refresh with Operator build 4.4.6+20260807.081800 and Interim Fix 064. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires the attacker to be on an adjacent network path (AV:A) carrying IBM FTM traffic and to successfully intercept it (AC:H) while FTM is configured/operating such that sensitive or security-critical data crosses a communication channel without transport encryption (TLS). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	This is a genuine but low-urgency issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: apply the fix identified in IBM Support node 7288641 for the affected Financial Transaction Manager for Red Hat OpenShift releases (4.0.6.0 through 4.0.6.0.0.6.0 Refresh with Operator 4.4.6+20260807.081800, 4.0.7.0, 4.0.8.0, 4.0.9.0, and 4.0.10.0 Interim Fix 064), following IBM's documented upgrade path since cross-version jumps in this product line are constrained. … Detailed patch versions, workarounds, and compensating controls in full report.