rootpwn

medium · CVSS v3 5.3

CVE-2026-17620

IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 through 4.0.10 transmits sensitive or security‑critical data i

Overview

IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 through 4.0.10 transmits sensitive or security‑critical data in cleartext over a network channel. This allows attackers to sniff and potentially intercept confidential transaction information. The vulnerability is identified as CVE-2026-17620 with medium severity.

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Impact

Confidentiality of transaction data is at risk; attackers could capture sensitive financial information, potentially leading to fraud or data leakage. The risk primarily affects organizations running IBM FTM on RedHat OpenShift, especially those handling financial transactions.

Remediation

Apply the interim fix 064 or upgrade to a patched version; configure FTM to use TLS/SSL for all communication; enforce network segmentation and monitoring to detect sniffing; update the OpenShift operator to the latest stable release.

Risk context

With a CVSS v3 score of 5.3 and no EPSS data, the risk is moderate but warrants timely remediation to protect sensitive financial data.

Affected products

  • IBM Financial Transaction Manager for RedHat OpenShift 4.0.6.0
  • IBM FTM Operator 4.4.6+
  • IBM FTM 4.0.7
  • IBM FTM 4.0.8
  • IBM FTM 4.0.9
  • IBM FTM 4.0.10

Scores

Severity
medium
CVSS v2
4.6
CVSS v3
5.3
CVSS v4
—
EPSS
—

confidentiality IBM FTM RedHat OpenShift cleartext network-sniffing medium patch

← All CVEs

Related CVEs

medium

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account does not provide normal administrator access; additional vulnerabilities are required to obtain an administrator takeover. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-92929

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the affected non-TLS web interfaces and disclose configuration information. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-92930

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a valid unlock code offline and use it to reset the administrator password. The underlying design has been present since at least firmware 2.2.3.4. Upgrade to version 3.5.4.

View analysis

medium

CVE-2026-95829

A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java of the component Pagination Inner Interceptor. The manipulation of the argument orders[0].column leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is ea7f0fae7cb0fd998a3284c11addce689350cd69. It is suggested to install a patch to address this issue.

View analysis