CVEvulnerability
CVE-2014-0866
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext credentials over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• ibm algo credit limits 4.5.0
• ibm algo credit limits 4.7.0
• ibm algorithmics
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Jun/173 seclists.org
- http://www-01.ibm.com/support/docview.wss?uid=swg21675881 Vendor Advisory
- http://www.securityfocus.com/archive/1/532598/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90940 exchange.xforce.ibmcloud.com
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt www.sec-consult.com
- http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Jun/173 seclists.org
- http://www-01.ibm.com/support/docview.wss?uid=swg21675881 Vendor Advisory
- http://www.securityfocus.com/archive/1/532598/100/0/threaded www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90940 exchange.xforce.ibmcloud.com
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt www.sec-consult.com