Description (CNA)
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query string.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90941
- http://www.securityfocus.com/archive/1/532598/100/0/threaded
- http://www-01.ibm.com/support/docview.wss?uid=swg21675881
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt
- http://seclists.org/fulldisclosure/2014/Jun/173
ADP enrichment
No English description supplied.
- http://packetstormsecurity.com/files/127304/IBM-Algorithmics-RICOS-Disclosure-XSS-CSRF.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90941
- http://www.securityfocus.com/archive/1/532598/100/0/threaded
- http://www-01.ibm.com/support/docview.wss?uid=swg21675881
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140630-0_IBM_Algorithmics_RICOS_multiple_vulnerabilities_v10.txt
- http://seclists.org/fulldisclosure/2014/Jun/173