CVE-2014-0864
IBM Algo Credit Limits 4.5.0-4.7.0 - Cross-Site Request Forgery via Crafted XML Document
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-0864.
AI-analyzed exploit summary This is a detailed security advisory from SEC Consult Vulnerability Lab describing multiple vulnerabilities in IBM Algorithmics RICOS, including CSRF (CVE-2014-0864), XSS, password disclosure, and broken encryption. It provides technical details, proof-of-concept examples, and affected versions.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change (1) a deal's currency or (2) a limit via a crafted XML document.
Exploits (1)
This is a detailed security advisory from SEC Consult Vulnerability Lab describing multiple vulnerabilities in IBM Algorithmics RICOS, including CSRF (CVE-2014-0864), XSS, password disclosure, and broken encryption. It provides technical details, proof-of-concept examples, and affected versions.