CVE-2014-3068

Published: Dec 2, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.

Affected (46)

Products: Ibm: Java

Ibm

1 product

Java

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Ibm Java	Version 5.0.0.0
Ibm Java	Version 5.0.11.0
Ibm Java	Version 5.0.11.1
Ibm Java	Version 5.0.11.2
Ibm Java	Version 5.0.12.0
Ibm Java	Version 5.0.12.1
Ibm Java	Version 5.0.12.2
Ibm Java	Version 5.0.12.3
Ibm Java	Version 5.0.12.4
Ibm Java	Version 5.0.12.5
Ibm Java	Version 5.0.13.0
Ibm Java	Version 5.0.14.0
Ibm Java	Version 5.0.15.0
Ibm Java	Version 5.0.16.0
Ibm Java	Version 5.0.16.1
Ibm Java	Version 5.0.16.2
Ibm Java	Version 5.0.16.3
Ibm Java	Version 6.0.0.0
Ibm Java	Version 6.0.1.0
Ibm Java	Version 6.0.10.0
Ibm Java	Version 6.0.10.1
Ibm Java	Version 6.0.11.0
Ibm Java	Version 6.0.12.0
Ibm Java	Version 6.0.13.0
Ibm Java	Version 6.0.13.1
Ibm Java	Version 6.0.13.2
Ibm Java	Version 6.0.14.0
Ibm Java	Version 6.0.2.0
Ibm Java	Version 6.0.3.0
Ibm Java	Version 6.0.4.0
Ibm Java	Version 6.0.5.0
Ibm Java	Version 6.0.6.0
Ibm Java	Version 6.0.7.0
Ibm Java	Version 6.0.8.0
Ibm Java	Version 6.0.8.1
Ibm Java	Version 6.0.9.0
Ibm Java	Version 6.0.9.1
Ibm Java	Version 6.0.9.2
Ibm Java	Version 7.0.0.0
Ibm Java	Version 7.0.1.0
Ibm Java	Version 7.0.2.0
Ibm Java	Version 7.0.3.0
Ibm Java	Version 7.0.4.0
Ibm Java	Version 7.0.4.1
Ibm Java	Version 7.0.4.2
Ibm Java	Version 7.0.5.0