IBM Financial Transaction Manager (FTM) for RedHat OpenShift version 4.0.6.0 contains an SQL injection vulnerability (CWE-89) that could be exploited by a remote authenticated attacker. This flaw allows the attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries, potentially leading to unauthorized disclosure of sensitive information. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and requiring privileges but no user interaction.

Successful exploitation can lead to unauthorized disclosure of sensitive information within the affected system. There is no impact on data integrity or system availability reported. The attacker must be authenticated to exploit this vulnerability.

No patch or official fix information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected version and monitor for suspicious activity involving SQL queries. Avoid exposing the affected system to untrusted users.