CVE-2014-0867

2014-07-0711:01:28

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.

Affected configurations

Nvd

Node

ibmalgo_credit_limitsMatch4.5.0

ibmalgo_credit_limitsMatch4.7.0

ibmalgorithmicsMatch-

VendorProductVersionCPE
ibmalgo_credit_limits4.5.0cpe:2.3:a:ibm:algo_credit_limits:4.5.0:*:*:*:*:*:*:*
ibmalgo_credit_limits4.7.0cpe:2.3:a:ibm:algo_credit_limits:4.7.0:*:*:*:*:*:*:*
ibmalgorithmics-cpe:2.3:a:ibm:algorithmics:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	algo_credit_limits	4.5.0	cpe:2.3:a:ibm:algo_credit_limits:4.5.0:::::::*
ibm	algo_credit_limits	4.7.0	cpe:2.3:a:ibm:algo_credit_limits:4.7.0:::::::*
ibm	algorithmics	-	cpe:2.3:a:ibm:algorithmics:-:::::::*