CVE-2014-0869: The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5...

Security readout for executives and security teams

IBM Algorithmics Algo Credit Limits exposed a risky decryption behavior in RICOS. A remote attacker who captured network traffic could more easily recover cleartext passwords because the decrypt function did not require a key. This is most urgent for organizations still running the old affected ACLM versions. Exposure is likely limited to legacy IBM Algorithmics ACLM deployments, especially where RICOS traffic or interfaces were reachable by untrusted networks or users able to observe network traffic. Prioritize if IBM ACLM remains in production or supports sensitive financial workflows. Credential recovery risk can enable broader compromise, but urgency depends on whether this legacy product is still deployed and reachable. Mitigation focus: Upgrade affected ACLM deployments to IBM 4.7.0.03 FP5 or later guidance.; Review IBM advisory SWG21675881 for vendor-supported remediation details.; Restrict network access to ACLM/RICOS services to trusted administrative paths..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.