CVE-2014-0869
07.07.2014, 11:01
The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics does not require a key, which makes it easier for remote attackers to obtain cleartext passwords by sniffing the network and then providing a string argument to this function.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | algo_credit_limits | 4.5.0 |
| ibm | algo_credit_limits | 4.7.0 |
| ibm | algorithmics | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References