VULNERABILITY INTELLIGENCE

CVE-2014-0868

CVSS score4.9 MEDIUM
EPSS probability4.27%
CISA KEVNot currently listed
Published2014-07-07
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:P

Description

RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document, as demonstrated by manipulation of read-only limit data.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references