Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.7

IBM Financial Transaction Manager for RedHat OpenShift may leak data

CVE-2026-18173 · published 27 days ago
Summary

IBM Financial Transaction Manager running on RedHat OpenShift does not properly enforce two-way encryption checks, allowing a remote attacker to capture sensitive information. This could expose transaction details or other confidential data. Apply the latest IBM security update and verify that mutual TLS is correctly configured.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm financial transaction manager (ftm) for redhat openshift <= 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064
Original advisory text
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authentication.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.7 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published22 Sep 2026
Updated19 Oct 2026
First seen22 Sep 2026
Sources
CVE-2026-18173 · NVD
CVE-2026-18173 · MITRE
Track software like this
Free during beta