What is GHSA-h5cj-2gph-734f?

GHSA-h5cj-2gph-734f is a security advisory published by GitHub Security Advisories with Medium severity. IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing...

Which CVE IDs does GHSA-h5cj-2gph-734f cover?

GHSA-h5cj-2gph-734f covers the following CVE IDs: CVE-2026-19267. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h5cj-2gph-734f?

GHSA-h5cj-2gph-734f has a CVSS v3 base score of 6.2, published by GitHub Security Advisories.

GHSA-h5cj-2gph-734fMediumCVSS 6.2

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-19267 →

📋 Description

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint (CommandsResource.java:31). A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functions.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19267
https://www.ibm.com/support/pages/node/7288641
https://github.com/advisories/GHSA-h5cj-2gph-734f