Loading vulnerability…
Insufficiently Protected Credentials in IBM Financial Transaction Manager for Red Hat OpenShift
CVE-2026-17643 is an insufficiently protected credentials vulnerability in IBM Financial Transaction Manager (FTM) for Red Hat OpenShift. An attacker with local low-privileged access can access inadequately protected credentials, enabling disclosure of sensitive information and unauthorized actions. Affected releases include FTM 4.0.6.0 through 4.0.10.0, including specified 4.0.6.0 iFix6 builds.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can compromise credentials and result in high confidentiality, integrity, and availability impact. An attacker can obtain sensitive information and perform unauthorized actions, including unauthorized transaction changes.
Patch, then assume compromise.
Upgrade IBM Financial Transaction Manager for Red Hat OpenShift to version 4.0.11.0, which resolves this vulnerability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.