CVE-2014-0868: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics reli...

Security readout for executives and security teams

This issue affects IBM Algorithmics RICOS in Algo Credit Limits. An authenticated remote user could bypass dual-control protections and alter data intended to be read-only by submitting crafted XML. The business concern is unauthorized changes to credit-limit governance data in a system used for financial risk controls. Exposure is likely limited to organizations running IBM Algorithmics Algo Credit Limits or RICOS versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5. The sources do not identify broader IBM products as affected. Prioritize remediation where ACLM supports credit-limit or financial risk governance. The issue requires authentication, but it undermines a control designed to prevent unilateral sensitive changes. Mitigation focus: Upgrade affected ACLM/RICOS deployments to 4.7.0.03 FP5 or vendor-supported later guidance.; Confirm IBM support documentation for the exact fixed maintenance level.; Restrict ACLM/RICOS access to trusted users and networks while remediation is pending..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.