Rewterz
Rewterz Threat Advisory – CVE-2021-38927 – IBM Aspera Console Vulnerability
December 26, 2023
Rewterz
Rewterz Threat Alert – Cloud Atlas Targets Russian Agro and Research Organizations with Spear-Phishing – Active IOCs
December 26, 2023

Rewterz Threat Advisory – CVE-2023-49880 – IBM Financial Transaction Manager Vulnerability

Severity

High

Analysis Summary

CVE-2023-49880

In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business transaction.

Impact

  • Data Manipulation

Indicators Of Compromise

CVE

  • CVE-2023-49880

Affected Vendors

IBM

Affected Products

  • IBM Financial Transaction Manager for SWIFT Services 3.2.4

Remediation

Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.

IBM Security Advisory