IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 contains a missing authorization vulnerability (CWE-862) that allows a remote authenticated attacker to bypass security controls by forging user identities. This improper authorization flaw can lead to unauthorized actions affecting data integrity. The CVSS v3.1 score is 6.5 (medium severity) with attack vector network, low attack complexity, requires privileges, no user interaction, and unchanged scope. No known exploits are reported in the wild.

An attacker with valid authentication can bypass authorization controls to impersonate other users, potentially performing unauthorized actions that compromise data integrity. Confidentiality and availability are not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for suspicious activity related to user identity manipulation.