CVE-2026-18156
MediumCVSS 6.5Summary
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.
Risk Assessment
An attacker can impersonate other users, gaining unauthorized access to functions and data, potentially leading to confidentiality and integrity breaches.
Recommendation
Apply available IBM updates that improve authorization mechanisms.
Other vulnerabilities in IBM Financial Transaction Manager (FTM) for RedHat OpenShift
See all- CVE-2026-18170Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.
- CVE-2026-18161Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
Original NVD description (English source)
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.