Information disclosure in IBM Algo Credit Limits
CVE-2014-0894
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document.
Vulnerability class: Information Disclosure
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Algo_credit_limits — versions 4.5.0, 4.7.0
- Ibm Algorithmics
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_MISC)
- psirt@us.ibm.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (Exploit, x_refsource_MISC)
- psirt@us.ibm.com (mailing-list, x_refsource_FULLDISC)