CVE-2016-0268

XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 110915.
References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21977245 Patch Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:ach_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:cps_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:check_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:cps_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:check_services:*:*

Information

Published : 2018-03-09 11:29

Updated : 2018-03-26 11:09


NVD link : CVE-2016-0268

Mitre link : CVE-2016-0268


JSON object : View

CWE
CWE-611

Improper Restriction of XML External Entity Reference

Advertisement

dedicated server usa

Products Affected

ibm

  • financial_transaction_manager