CVE-2014-0871: Infoleak
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to obtain potentially sensitive Tomcat stack-trace information via non-printing characters in a cookie to the /classes/ URI, as demonstrated by the \x00 character.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0871?
CVE-2014-0871 is considered a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2014-0871?
To fix CVE-2014-0871, upgrade IBM Algo Credit Limits to version 4.7.0.03 FP5 or later.
What versions of IBM Algo Credit Limits are affected by CVE-2014-0871?
CVE-2014-0871 affects IBM Algo Credit Limits versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5.
What types of attacks can exploit CVE-2014-0871?
CVE-2014-0871 can be exploited by remote attackers using specially crafted cookies to access sensitive stack-trace information.
What is the impact of CVE-2014-0871 on organizations?
The impact of CVE-2014-0871 on organizations can include exposure of sensitive data, potentially leading to further attacks.