IBM Algo Credit Limits CVE-2014-0864 Cross Site Request Forgery Vulnerability

Bugtraq ID:	68262
Class:	Design Error
CVE:	CVE-2014-0864
Remote:	Yes
Local:	No
Published:	Jun 30 2014 12:00AM
Updated:	Jun 30 2014 12:00AM
Credit:	A. Kolmann, V. Habsburg-Lothringen, F. Lukavsky of SEC Consult Vulnerability Lab
Vulnerable:
Not Vulnerable:

IBM Algo Credit Limits CVE-2014-0864 Cross Site Request Forgery Vulnerability

IBM Algo Credit Limits is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible.

IBM Algo Credit Limits 4.5.0 through 4.7.0 are vulnerable; other versions may also be affected.

IBM Algo Credit Limits CVE-2014-0864 Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice a user into visiting a malicious site.

The following exploit is available:

• /data/vulnerabilities/exploits/68262.html.txt

IBM Algo Credit Limits CVE-2014-0864 Cross Site Request Forgery Vulnerability

References:

• IBM Homepage (IBM)