NetSight
IP …
low3.5Public exploit code

CVE-2014-0894

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document.

Affected products

VendorProductAffected versions
IbmAlgo Credit Limits
Versions 4.5.0, 4.7.0
IbmAlgorithmics
All versions

Weakness classification

CWE-200

References