PT-2014-3905

CVE-2014-0867

Published

2014-07-07

Updated

2018-10-09

CVSS 2.0

5.8

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5

Description The issue allows remote attackers to create or modify cookies via the query string in the rcore6/main/addcookie.jsp file.

Recommendations For versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5, update to version 4.7.0.03 FP5 or later to resolve the issue.

Exploitability

Exploit

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾