IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 contains a buffer overflow vulnerability (CWE-787) that can be exploited by a remote authenticated attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity. The attack vector is network-based, requiring low privileges and no user interaction, but with high attack complexity. Successful exploitation results in a complete compromise of confidentiality, integrity, and availability with a scope change.

A remote authenticated attacker could exploit this buffer overflow to execute arbitrary code on the affected system, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. The vulnerability allows code execution with a scope change, meaning the attacker could gain control beyond the initially compromised component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided in the available data. Until a patch is available, restrict access to the affected version and monitor for suspicious activity related to this component.