CVE-2026-17620

Received Received - Intake

IBM Financial Transaction Manager Cleartext Transmission Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-17620

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	From 4.0.6.0 (inc) to 4.0.6.0.0.6.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-523	Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift transmits sensitive or security-critical data in cleartext. This means the data is not encrypted and can be intercepted by unauthorized actors sniffing the communication channel.

Impact Analysis

An attacker could capture sensitive data transmitted by FTM, leading to potential data breaches, unauthorized access to financial or personal information, and compliance violations.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for protecting sensitive data in transit. Organizations using FTM may face fines, legal penalties, and reputational damage due to non-compliance.

Mitigation Strategies

Apply the latest Interim Fix provided by IBM for IBM Financial Transaction Manager to address the cleartext transmission issue. Ensure all sensitive data is encrypted during transmission by configuring secure communication channels.

Hi! I’m here to help you understand CVE-2026-17620. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70