CVE-2014-0867 rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query st...
MediumCVSS 5.8
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm algo credit limits | = 4.5.0 | No fix listed |
| ibm algo credit limits | = 4.7.0 | No fix listed |
| ibm algorithmics | All versions | No fix listed |
References
- packetstormsecurity.com
- 20140630 SEC Consult SA-20140630-0 :: Multiple vulnerabilities in IBM Algorithmics RICOS mailing-list
- www-01.ibm.com vendor-advisory
- 20140630 SEC Consult SA-20140630-0 :: Multiple vulnerabilities in IBM Algorithmics RICOS mailing-list
- ibm-aclm-cve20140867-cookies(90941) vdb-entry
- www.sec-consult.com