CVE-2014-0894: RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allo...

Security readout for executives and security teams

IBM Algorithmics Algo Credit Limits could expose database usernames and passwords stored in XML fields. The issue affects older ACLM/RICOS versions before 4.7.0.03 FP5. Business urgency depends on whether the product is still deployed and who can read the relevant XML document. Exposure is likely limited to organizations still running IBM Algorithmics ACLM/RICOS 4.5.0 through vulnerable 4.7.0 builds. Systems with accessible configuration or XML documents containing DbUser and DbPass fields are the main concern. Treat as high priority if the product is still in use. Credential exposure can turn a local or application-level access issue into database compromise. If ACLM/RICOS is retired, document non-exposure and close after evidence review. Mitigation focus: Confirm whether ACLM/RICOS is still deployed anywhere in the environment.; Upgrade to 4.7.0.03 FP5 or a later vendor-supported fixed level.; Review IBM guidance for any additional vendor remediation instructions..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.