CVE-2014-3068

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.

• CWE-255

• http://rhn.redhat.com/errata/RHSA-2015-0264.html
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21691089Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1164201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93756
• http://rhn.redhat.com/errata/RHSA-2015-0264.html
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV66876Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV66894Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21691089Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1164201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/93756

Published

Dec 2, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3061Cross-site request forgery (CSRF) vulnerability in IBM Empto…
• CVE-2014-3062Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR…
• CVE-2014-3063IBM InfoSphere Master Data Management - Collaborative Editio…
• CVE-2014-3064The GDS component in IBM InfoSphere Master Data Management -…
• CVE-2014-3065Unspecified vulnerability in IBM Java Runtime Environment (J…
• CVE-2014-3066IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows rem…
• CVE-2014-3069Multiple CRLF injection vulnerabilities in the Universal Acc…
• CVE-2014-3070The addFileRegistryAccount Virtual Member Manager (VMM) SPI …
• CVE-2014-3071Cross-site scripting (XSS) vulnerability in the Data Quality…
• CVE-2014-3072Unspecified vulnerability in the Automation Server in IBM Se…
• CVE-2014-3073Unspecified vulnerability in IBM Security Access Manager (IS…
• CVE-2014-3074The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x all…