CVE-2014-0868

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows…

published July 7, 2014

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document, as demonstrated by manipulation of read-only limit data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04266 · 91.0th percentile
Published
2014-07-07T10:00Z
EPSS history
Timeline
  • 07 JUL 10:00Z
    RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows…
    cvelistv5