← volver
CVE-2014-0866

CVE-2014-0866

EPSS 5.5%
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext credentials over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencepacketstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.htmlno verificadoexploitdbwww.exploit-db.com/exploits/33942no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.htmlhttp://seclists.org/fulldisclosure/2014/Jun/173https://exchange.xforce.ibmcloud.com/vulnerabilities/90940https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txthttp://www-01.ibm.com/support/docview.wss?uid=swg21675881http://www.securityfocus.com/archive/1/532598/100/0/threaded