CVE-2014-0865: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics reli...

Security readout for executives and security teams

This CVE affects IBM Algorithmics RICOS / Algo Credit Limits, a financial limits application. An authenticated remote user could bypass intended dual-control checks because validation relied on the client side, allowing unauthorized data changes such as limit manipulation. Exposure is likely limited to organizations running the named IBM Algorithmics ACLM/RICOS versions, especially financial institutions using the product for credit-limit workflows. The bundle does not identify generic internet-wide exposure. Treat as high priority only if the affected IBM financial application is in use. The business risk is unauthorized modification of credit-limit data despite dual-control expectations, which can affect financial control, audit, and operational integrity. Mitigation focus: Check IBM guidance for the fixed ACLM/RICOS level and deployment requirements.; Prioritize upgrade beyond versions before 4.7.0.03 FP5 if the product is present.; Restrict access to trusted authenticated users until remediation is complete..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.