CVE-2026-17620

Analyzed Analyzed - Analysis Complete

IBM Financial Transaction Manager Cleartext Transmission Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-10-15

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-18

NVD

CVE-2026-17620

EUVD

EUVD-2026-84968

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	From 4.0.7.0 (inc) to 4.0.11.0 (exc)
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-523	Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift transmits sensitive or security-critical data in cleartext. This means the data is not encrypted and can be intercepted by unauthorized actors sniffing the communication channel.

Detection Guidance

This vulnerability involves transmission of sensitive data in cleartext, which can be detected by monitoring network traffic for unencrypted communications. Use packet capture tools like tcpdump or Wireshark to inspect traffic from IBM Financial Transaction Manager components. Look for plaintext transmission of sensitive data such as transaction details or credentials.

Impact Analysis

An attacker could capture sensitive data transmitted by FTM, leading to potential data breaches, unauthorized access to financial or personal information, and compliance violations.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for protecting sensitive data in transit. Organizations using FTM may face fines, legal penalties, and reputational damage due to non-compliance.

Mitigation Strategies

Apply the latest Interim Fix provided by IBM for IBM Financial Transaction Manager to address the cleartext transmission issue. Ensure all sensitive data is encrypted during transmission by configuring secure communication channels.

Hi! I’m here to help you understand CVE-2026-17620. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70