CVE-2014-0871: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allo...

Security readout for executives and security teams

CVE-2014-0871 is an information disclosure issue in IBM Algorithmics Algo Credit Limits. A malformed cookie containing non-printing characters could cause Tomcat stack-trace details to be exposed. The known impact is leakage of technical server information, not direct data theft or system takeover. Exposure is most relevant where IBM Algorithmics Algo Credit Limits or RICOS versions before 4.7.0.03 FP5 remain deployed, especially if the web interface is reachable by untrusted users or networks. Treat this as a legacy financial-application exposure requiring inventory-driven remediation. It is not evidenced as actively exploited, but leaked stack traces can help attackers map systems and chain follow-on attacks. Mitigation focus: Identify any IBM Algo Credit Limits or RICOS deployments and versions.; Apply IBM 4.7.0.03 FP5 or a vendor-supported later release if applicable.; Review IBM advisory guidance before changing unsupported legacy systems..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.