PT-2014-3905 · Ibm · Ibm Algo Credit Limits

Publicado 2014-07-07 · Atualizado 2018-10-09 · CVE-2014-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5

Description The issue allows remote attackers to create or modify cookies via the query string in the rcore6/main/addcookie.jsp file.

Recommendations For versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5, update to version 4.7.0.03 FP5 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2014-0867

Produtos afetados

Ibm Algo Credit Limits

Referências · 8

• 🔥 https://exploit-db.com/exploits/33942 · Exploit
• http://securityfocus.com/archive/1/532598/100/0/threaded · Nota
• https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21675881 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2014/Jun/173 · Nota
• http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90941 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0867 · Nota de Segurança