IBM Algo Credit Limits CVE-2014-0871 Information Disclosure Vulnerability

Bugtraq ID:	68270
Class:	Input Validation Error
CVE:	CVE-2014-0871
Remote:	Yes
Local:	No
Published:	Jun 30 2014 12:00AM
Updated:	Jun 30 2014 12:00AM
Credit:	A. Kolmann, V. Habsburg-Lothringen, F. Lukavsky of SEC Consult Vulnerability Lab
Vulnerable:
Not Vulnerable:

IBM Algo Credit Limits CVE-2014-0871 Information Disclosure Vulnerability

IBM Algo Credit Limits is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

IBM Algo Credit Limits 4.5.0 through 4.7.0 are vulnerable; other versions may also be affected.

IBM Algo Credit Limits CVE-2014-0871 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

IBM Algo Credit Limits CVE-2014-0871 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Algo Credit Limits CVE-2014-0871 Information Disclosure Vulnerability

References:

• IBM Algorithmics software - Homepage (IBM)
  
• IBM Homepage (IBM)
  
• Security Bulletin: Multiple Security Vulnerabilities in Certain GUI Components o (IBM)