CVE-2014-0867: rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03...

Security readout for executives and security teams

IBM Algorithmics RICOS in Algo Credit Limits exposed a page that let a remote party create or change browser cookies through URL parameters. For executives, this is a legacy financial-risk application issue: urgency is highest where ACLM remains deployed and reachable. Public sources do not provide CVSS, confirmed exploitation, or detailed impact beyond cookie manipulation. Exposure is likely limited to organizations still running IBM Algorithmics Algo Credit Limits versions 4.5.0 to pre-4.7.0.03 FP5, especially if the RICOS web interface is network-reachable. Internet exposure would increase concern, but the provided sources do not confirm typical deployment patterns. Treat as a targeted legacy-application remediation item, not an emergency without confirmed exposure. Prioritize quickly if ACLM supports live credit-limit or risk workflows, is externally reachable, or cannot be confirmed patched. Mitigation focus: Upgrade ACLM to 4.7.0.03 FP5 or later where applicable.; Check IBM support guidance for supported fixes and interim controls.; Restrict access to RICOS interfaces to trusted networks and users..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.