Security Bulletin: Vulnerability in Apache Tomcat afffects IBM Algorithmics One-Algo Risk Application (CVE-2016-6816)

Summary Apache Tomcat is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would...

PT-2018-4585

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application ARA versions 4.9.1 through 5.1.0 Description The issue allows remote authenticated users to conduct clickjacking attacks. Recommendations For versions 4.9.1 through 5.1.0, update to a version that...

CVE-2016-0207: Improper Input Validation

IBM Algorithmics One-Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. IBM X-Force ID: 109399...

PT-2017-12082

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application versions 4.9.1 through 5.1.0 Description The issue allows a user to gain access to files in the local environment that should not be viewed by application users. Recommendations For versions 4.9.1...

CVE-2017-1154: Exposure of Sensitive Information to an Unauthorized Actor

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

PT-2017-12093

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application versions 4.9.1, 5.0, and 5.1.0 Description The issue allows a user to gain access to another user's reports using a specially crafted HTTP request. Recommendations For version 4.9.1, update to a versi...

CVE-2017-1155: Exposure of Sensitive Information to an Unauthorized Actor

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...