PT-2014-3906 · Ibm · Ibm Algo Credit Limits

Publicado

2014-07-07

·

Atualizado

2018-10-09

·

CVE-2014-0868

CVSS v2.0

4.9

Média

VetorAV:N/AC:M/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits (ACLM) versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5
Description The issue relies on client-side input validation, allowing remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document. This can be demonstrated by manipulation of read-only limit data.
Recommendations For IBM Algo Credit Limits (ACLM) versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5, update to version 4.7.0.03 FP5 or later to resolve the issue. As a temporary workaround, consider restricting access to modify data via crafted XML documents to minimize the risk of exploitation.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-0868

Produtos afetados

Ibm Algo Credit Limits