{"api_version":"1","generated_at":"2026-07-23T07:37:50+00:00","cve":"CVE-2014-3068","urls":{"html":"https://cve.report/CVE-2014-3068","api":"https://cve.report/api/cve/CVE-2014-3068.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-3068","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3068"},"summary":{"title":"CVE-2014-3068","description":"IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.","state":"PUBLISHED","assigner":"ibm","published_at":"2014-12-02 01:59:02","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-255","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Security Bulletin: Vulnerabilities exists in components of IMS Enterprise Suite: Connect API for Java and Explorer for Development (CVE-2014-4263) - United States","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93756","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93756","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM IV66894: FIX SECURITY VULNERABILITY CVE-2014-3068 - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html","name":"http://rhn.redhat.com/errata/RHSA-2015-0264.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM IV66876: FIX SECURITY VULNERABILITY CVE-2014-3068 - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201","name":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 1164201 – CVE-2014-3068 IBM JDK: Java CMS keystore provider potentially allows brute-force private key recovery","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3068","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3068","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.11.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.12.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.16.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.16.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"5.0.16.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.13.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"6.0.9.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3068","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"java","cpe6":"7.0.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:35:55.934Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ibm-ikeyman-cve20143068-info-disc(93756)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93756"},{"name":"IV66876","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201"},{"name":"RHSA-2015:0264","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html"},{"name":"IV66894","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-10-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"name":"ibm-ikeyman-cve20143068-info-disc(93756)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93756"},{"name":"IV66876","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201"},{"name":"RHSA-2015:0264","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html"},{"name":"IV66894","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-3068","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ibm-ikeyman-cve20143068-info-disc(93756)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93756"},{"name":"IV66876","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21691089"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164201"},{"name":"RHSA-2015:0264","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html"},{"name":"IV66894","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2014-3068","datePublished":"2014-12-02T01:00:00.000Z","dateReserved":"2014-04-29T00:00:00.000Z","dateUpdated":"2024-08-06T10:35:55.934Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-12-02 01:59:02","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-255","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"03D3F84F-3F6E-4DF1-B162-152293D951EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"A18121C3-F3F1-4EC7-A64E-3F6A0C9788C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"BAD59912-7325-4AE1-ACCF-D4F804AF3947"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.11.2:*:*:*:*:*:*:*","matchCriteriaId":"62783157-E3B6-4A23-8D2F-1FBD0762E9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"14CC0D53-8AB8-4D44-82BB-0E6A974C36AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"91A3129F-17A6-4F32-BD5D-34E4A1D1A840"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.2:*:*:*:*:*:*:*","matchCriteriaId":"E2845FF4-2620-4B8D-96CF-CC26B3DEA3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.3:*:*:*:*:*:*:*","matchCriteriaId":"CC7CD279-54B6-4F6B-AE14-299FB319C690"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.4:*:*:*:*:*:*:*","matchCriteriaId":"0EA269CA-4676-4008-89EF-20FAB89886A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.12.5:*:*:*:*:*:*:*","matchCriteriaId":"D22105B6-1378-4E1C-B28A-FCAE00A2D5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"601762D3-1188-4945-931D-EB8DAC2847A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"FA4A30A6-498C-46B8-8EFC-45EB13354EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"414CC00A-C797-4C34-8709-75DC061DCDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"4401B967-0550-44F1-8753-9632120D2A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"4961693D-F56C-46CD-B721-6A15E2837C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.16.2:*:*:*:*:*:*:*","matchCriteriaId":"AA4FBB66-CF6A-42D2-B122-1861F4139E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:5.0.16.3:*:*:*:*:*:*:*","matchCriteriaId":"0E4B1DD6-3056-4FA8-8203-CCD8036FBD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"14AD4A87-382A-41F0-96D8-0F0A9B738773"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"33701DDF-6882-41D3-A11B-A1F4585A77A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"25C58BBA-06AC-40CD-A906-FD1B3B0AAB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"76C5B430-EE11-4674-B4B0-895D66E3B32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B1837D84-6B4F-40D8-9A3F-71C328F659BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D20A369B-2168-4883-A84C-BB48A71AFB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3628AAB4-E524-46E5-AAF4-1980256F13CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"30DC9FE3-CDE9-4F83-989B-4E431BA18B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C17B1C6B-04CE-49FB-B9BD-98ECD626B26F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"81F529EB-2BCA-4E3E-93E4-2A9880CDA367"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"8DEAC3D6-F9F8-4F82-9BF1-FF0EC07A3274"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7694638C-CDAC-44DF-B9F9-F7237CD98017"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"23903A3C-1760-4836-BAE6-BDD32CBB4CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"2477E033-D26B-4D71-839B-5FE4B0927559"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CAB7BF-265E-411D-A584-E78DE171F065"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"4E45F670-232F-4CE5-8926-6463E5619506"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"5B70E6E3-15B3-4D48-AE49-B9184A58EECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"D5BCE3FD-B89B-4141-8103-9DB941AD60D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"8EADFB3B-738F-4919-B165-9ECEED46EA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"B23A5431-E599-4848-AB83-B299898F5EF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:6.0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAE5E9B-3CF5-40E5-A551-1AFD6BD07A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9A8BF650-B8F5-467E-8DBF-81788B55F345"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1752A831-916F-4A7D-8AAE-1CEFACC51F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0C9744C4-76BE-428B-AFF2-5BCE00A58322"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"48B1DE45-90F9-416B-9087-8AEF5B0A3C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF6A045-0DF6-463B-A0DB-6C31D8C2984C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A731493C-9B46-4105-9902-B15BA0E0FB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"49454369-A494-4EAA-88D5-181570DEBB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:java:7.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C76B9DFD-7259-423A-8CFC-A898E74897AE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"3068","Ordinal":"1","Title":"CVE-2014-3068","CVE":"CVE-2014-3068","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"3068","Ordinal":"1","NoteData":"IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.","Type":"Description","Title":"CVE-2014-3068"},{"CveYear":"2014","CveId":"3068","Ordinal":"2","NoteData":"2014-12-01","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"3068","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}