CVE-2026-18124

Analyzed Analyzed - Analysis Complete

IBM FTM for RedHat OpenShift Credential Exposure Vulnerability

Publication date: 2026-09-22

Last updated on: 2026-10-07

Assigner: IBM Corporation

Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-10-07

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-11

NVD

CVE-2026-18124

EUVD

EUVD-2026-84954

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	financial_transaction_manager	From 4.0.7.0 (inc) to 4.0.11.0 (exc)
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0
ibm	financial_transaction_manager	4.0.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

IBM Financial Transaction Manager (FTM) for RedHat OpenShift has a vulnerability where a local attacker could access sensitive information due to improperly protected credentials.

Detection Guidance

This vulnerability involves insufficiently protected credentials in IBM Financial Transaction Manager (FTM) for RedHat OpenShift. Detection requires checking for exposed credentials in configuration files or environment variables. Review FTM configuration files for plaintext credentials and inspect OpenShift secrets for improperly secured data.

Impact Analysis

This vulnerability may allow attackers to steal sensitive data, such as financial or personal information, if they gain local access to the system. It could lead to unauthorized access or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive information due to insufficiently protected credentials, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy). Unauthorized access risks exposing personal or protected health information, potentially resulting in regulatory penalties or breaches of confidentiality obligations.

Mitigation Strategies

Apply patches or updates provided by IBM for IBM Financial Transaction Manager (FTM) for RedHat OpenShift to address insufficiently protected credentials. Ensure credentials are stored securely and restrict local access to sensitive information.

Hi! I’m here to help you understand CVE-2026-18124. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70