Cleartext Credential Transmission Vulnerability in IBM Algorithmics Product
CVE-2014-0866

Currently unrated

Key Information:

Vendor

IBM
Status
Algorithmics
Algo Credit Limits
Vendor
CVE Published:
7 July 2014

What is CVE-2014-0866?

In IBM Algo Credit Limits versions 4.5.0 to 4.7.0 prior to 4.7.0.03 FP5, a vulnerability exists where cleartext credentials are transmitted over HTTP. This flaw enables remote attackers to intercept sensitive information during transmission through network sniffing techniques, potentially leading to unauthorized access and data compromise.

References

http://packetstormsecurity.com/files/127304/IBM-Algorithm...
x_refsource_MISC
http://www.securityfocus.com/archive/1/532598/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www-01.ibm.com/support/docview.wss?uid=swg21675881
x_refsource_CONFIRM

EPSS Score

21% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.