CVE-2015-4626 Business logic in n/a
Remote attackers can corrupt business logic by submitting negative overdraft values due to reliance on client-side validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4626?
CVE-2015-4626 is a high-severity vulnerability in n/a, published on 23 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft.
Weakness: CWE-189
Which versions are affected by CVE-2015-4626?
It affects 1 product.
Products include Treasuryxpress C2box.
How do I fix CVE-2015-4626?
No fix has been published for CVE-2015-4626 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-4626 being exploited?
There is no known exploitation of CVE-2015-4626 in the wild and no public exploit code.
Sources
Also known as GHSA-qfvx-qh4h-983h.