CVE-2026-17620 describes a vulnerability in IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 where sensitive or security-critical information is transmitted in cleartext over communication channels. This lack of encryption or protection in transit can expose credentials or other sensitive data to unauthorized interception by attackers with network access. The vulnerability is classified under CWE-523 (Unprotected Transport of Credentials). The CVSS 3.1 vector indicates the attack requires adjacent network access with high attack complexity and no privileges or user interaction, impacting confidentiality but not integrity or availability.

An attacker with access to the network segment adjacent to the vulnerable system could intercept sensitive credentials or security-critical data transmitted in cleartext. This exposure compromises confidentiality but does not affect data integrity or availability. The medium severity rating reflects the limited attack vector and complexity required.

No patch or official remediation guidance is provided in the available data. Organizations should monitor IBM advisories for updates or fixes addressing this issue. Until a fix is available, consider restricting network access to trusted entities and using network-level encryption or VPNs to protect communications involving the affected version.