IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 contains a missing authorization vulnerability (CWE-862) that could permit a remote attacker with valid authentication privileges to perform unauthorized payment mutation actions. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or remediation information is provided in the available data.

An attacker with authenticated access could modify payment transactions without proper authorization, potentially leading to unauthorized changes in financial data integrity. There is no reported impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated user privileges to the minimum necessary and monitor for unauthorized payment mutation activities.