CVE-2014-0894 Information disclosure in n/a
Attackers can discover database credentials by reading specific fields in an XML document within IBM Algo Credit Limits.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0894?
CVE-2014-0894 is a low-severity vulnerability in n/a, published on 7 Jul 2014.
Official description
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document.
Weakness: CWE-200
Which versions are affected by CVE-2014-0894?
It affects 2 products.
Products include Ibm Algo Credit Limits, Ibm Algorithmics.
How do I fix CVE-2014-0894?
No fix has been published for CVE-2014-0894 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-0894 being exploited?
There is no known exploitation of CVE-2014-0894 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wx6m-r4jc-mfvw.