CVE-2023-49880

IBM Financial Transaction Manager for SWIFT Services data manipulation

State: Published
Severity: 7.5 High
Published: Dec 25, 2023
Updated: Aug 2, 2024
Reserved: Dec 1, 2023

Description

In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction. IBM X-Force ID: 273183.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	ibm

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Financial Transaction Manager for SWIFT ServicesIBM	3.2.4Affected

References

https://www.ibm.com/support/pages/node/7101167vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/273183

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.