PT-2014-3905 · Ibm · Ibm Algo Credit Limits

Published 2014-07-07 · Updated 2018-10-09 · CVE-2014-0867

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5

Description The issue allows remote attackers to create or modify cookies via the query string in the rcore6/main/addcookie.jsp file.

Recommendations For versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5, update to version 4.7.0.03 FP5 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2014-0867

Affected Products

Ibm Algo Credit Limits

References · 8

• 🔥 https://exploit-db.com/exploits/33942 · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg21675881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0867 · Security Note
• http://securityfocus.com/archive/1/532598/100/0/threaded · Note
• https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt · Note
• http://seclists.org/fulldisclosure/2014/Jun/173 · Note
• http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90941 · Note