Cross-Site Request Forgery Vulnerabilities in IBM Algorithmics RICOS

CVE-2014-0864

Summary

Multiple CSRF vulnerabilities exist in IBM Algorithmics RICOS that allow remote attackers to exploit the system. An attacker can construct malicious XML documents to execute unauthorized requests, such as changing a deal's currency or modifying limit settings, thereby hijacking the authentication of arbitrary users under certain conditions. This opens the door to potential manipulation of sensitive data, making it essential for organizations using affected versions to implement the necessary security measures and updates.

References