Skip to content
Sign in
4.3 Medium

CVE-2020-5001 IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the…

Description

IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.

Affected products and versions

Product Affected versions Fixed in
Financial Transaction Manager 3.2 3.2.0 → < 3.2.7 3.2.7

Other CVEs of Financial Transaction Manager

The 34 CVEs of Financial Transaction Manager →
CVE-2020-4556 IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be… 4.0 Medium CVE-2020-5026 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote… 4.3 Medium CVE-2020-5002 IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions… 4.3 Medium CVE-2022-43872 IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows… 5.3 Medium
Track this CVE