CVE-2016-0232

MEDIUM

IBM Financial Transaction Manager 3.0.0 - Authenticated Sensitive Information Exposure via README Files

Title source: llm
STIX 2.1

Description

IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remote authenticated users to obtain sensitive information by reading README files.

References (7)

Core 7
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21976392
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56759
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56762
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56757
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56764
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56758
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI56763

Scores

CVSS v3 4.3
EPSS 0.0113
EPSS Percentile 62.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (12)
ibm/financial_transaction_manager 3.0.0.0 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.1 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.2 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.3 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.4 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.5 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.6 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.7 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.8 (3 CPE variants)
ibm/financial_transaction_manager 3.0.0.9 (3 CPE variants)
... and 2 more
Published Feb 15, 2016
Tracked Since Feb 18, 2026