CVE-2014-0894 RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbP...
LowCVSS 3.5
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm algo credit limits | = 4.5.0 | No fix listed |
| ibm algo credit limits | = 4.7.0 | No fix listed |
| ibm algorithmics | All versions | No fix listed |
References
- packetstormsecurity.com
- 20140630 SEC Consult SA-20140630-0 :: Multiple vulnerabilities in IBM Algorithmics RICOS mailing-list
- 59296 third-party-advisory
- www-01.ibm.com vendor-advisory
- 20140630 SEC Consult SA-20140630-0 :: Multiple vulnerabilities in IBM Algorithmics RICOS mailing-list
- ibm-aclm-cve20140894-database-pw(91313) vdb-entry
- www.sec-consult.com exploit