PublicCVE

CVE-2020-4905

MEDIUM5.9JSON exportCreate alert

Description

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote attacker to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to obtain sensitive information.

CVSS breakdown

CVSS 3.0
Confidentiality
High
Privileges Required
None
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
High
User Interaction
None
Scope
Unchanged
E
Unchanged
RL
O
RC
Changed

Affected products