VYPR
← All advisories
High severity8.0NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2016-0272

CVE-2016-0272

Description

Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors. IBM X-Force ID: 111052.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Financial Transaction Manager6 versions
    cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*+ 5 more
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:ach_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:check_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:*:*:*:*:*:cps_services:*:*range: >=3.0.0.0,<=3.0.0.12
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:check_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:2.1.1.2:*:*:*:*:cps_services:*:*
  • IBM/Financial Transaction Manager (FTM) for ACH Services for Multi-Platformllm-fuzzy
    Range: < 2.1.1.2, < 3.0.0.x before fp0013
  • IBM/Financial Transaction Manager for Corporate Payment Servicesllm-fuzzy
    Range: < 2.1.1.2, < 3.0.0.x before fp0013

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.