CVE-2026-18161
MediumCVSS 4.3Summary
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.
Risk Assessment
Falsified audit logs can conceal unauthorized activities, hindering detection of abuse and investigations.
Recommendation
Apply available IBM updates that improve HTTP header validation.
Other vulnerabilities in IBM Financial Transaction Manager (FTM) for RedHat OpenShift
See all- CVE-2026-18170Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or throttling.
- CVE-2026-18156Medium
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization.
Original NVD description (English source)
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a client-supplied HTTP header.