IBM Security Bulletin: Financial Transaction Manager for ACH Services: Information Leakage in configuration listing (CVE-2018-1670)

Jan 19, 2019 9:00 am EST

Categorized: Low Severity

Share this post:

IBM Financial Transaction Manager for ACH Services (FTM ACH) for Multi-Platform could allow an authenticated user to obtain sensitive product configuration information from log files.

CVE(s): CVE-2018-1670

Affected product(s) and affected version(s):

FTM ACH v3.0.6.0 – 3.0.6.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10731545
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144946



from IBM Product Security Incident Response Team https://ibm.co/2RUu8A0