CVE-2014-0833

IBM Financial Transaction Manager < 2.0.0.3 - Authenticated Access Restriction Bypass in OAC Component

Title source: llm
STIX 2.1

Description

The OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21662714
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/102767
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90612

Scores

EPSS 0.0111
EPSS Percentile 62.5%

Details

CWE
CWE-264
Status published
Products (3)
ibm/financial_transaction_manager 2.0.0.0
ibm/financial_transaction_manager 2.0.0.1
ibm/financial_transaction_manager 2.0.0.2
Published Feb 01, 2014
Tracked Since Feb 18, 2026