RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 up to and including 4.7.0 prior to 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document, as demonstrated by manipulation of read-only limit data.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm algorithmics - |
||
ibm algo credit limits 4.5.0 |
||
ibm algo credit limits 4.7.0 |
Vulmon