IBM FTM for RedHat OpenShift Credential Exposure Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-18124

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift has a vulnerability where a local attacker could access sensitive information due to improperly protected credentials.

Impact Analysis

This vulnerability may allow attackers to steal sensitive data, such as financial or personal information, if they gain local access to the system. It could lead to unauthorized access or data breaches.

Mitigation Strategies

Apply patches or updates provided by IBM for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address insufficiently protected credentials. Ensure credentials are stored securely and restrict local access to sensitive information.

Hi! I’m here to help you understand CVE-2026-18124. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70