Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2014-0894

Published: 07/07/2014 Updated: 09/10/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N
Subscribe to Algorithmics

Vulnerability Summary

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 up to and including 4.7.0 prior to 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent malicious users to discover database credentials by reading the DbUser and DbPass fields in an XML document.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm algorithmics -

ibm algo credit limits 4.5.0

ibm algo credit limits 4.7.0

Exploits

Exploit DB: IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory &lt; 20140630-0 &gt; ======================================================================= title: Multiple severe vulnerabilities product: IBM Algorithmics RICOS vulnerable version: 450 - 470 fixed version: 47003 ...
Exploit DB: IBM Algorithmics RICOS Disclosure / XSS / CSRF
IBM Algorithmics RICOS versions 450 through 470 suffer from cross site scripting, cross site request forgery, information disclosure, data manipulation, broken encryption, and various other vulnerabilities ...

References

CWE-200http://www-01.ibm.com/support/docview.wss?uid=swg21675881https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txthttp://secunia.com/advisories/59296http://seclists.org/fulldisclosure/2014/Jun/173http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/91313http://www.securityfocus.com/archive/1/532598/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/33942/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook