CVE-2014-0865: Input Validation
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via crafted serialized objects, as demonstrated by limit manipulations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0865?
CVE-2014-0865 has a medium severity rating due to the potential for authenticated users to bypass dual-control restrictions.
How do I fix CVE-2014-0865?
To remediate CVE-2014-0865, upgrade IBM Algo Credit Limits to version 4.7.0.03 FP5 or later.
What versions of IBM Algo Credit Limits are affected by CVE-2014-0865?
CVE-2014-0865 affects IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5.
What type of attack is possible due to CVE-2014-0865?
CVE-2014-0865 allows for modification of data by authenticated users through crafted serialized objects.
Is CVE-2014-0865 related to input validation issues?
Yes, CVE-2014-0865 is related to client-side input validation vulnerabilities.