NVD

Id
31334  
Name
CVE-2014-3068  
Description
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-12-01  
Modified Date
2015-03-17  
Seq
2014-3068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164074 31334 CVE-2014-3068 RHSA-2015:0264  View
164075 31334 CVE-2014-3068 IV66876  View
164076 31334 CVE-2014-3068 IV66894  View
164077 31334 CVE-2014-3068 http://www-01.ibm.com/support/docview.wss?uid=swg21691089  View
164078 31334 CVE-2014-3068 ibm-ikeyman-cve20143068-info-disc(93756)  View
164079 31334 CVE-2014-3068 https://bugzilla.redhat.com/show_bug.cgi?id=1164201  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16847 JVNDB-2014-005722 IBM Java Runtime Environment における Certificate Management System のキーストアから秘密鍵を取得される脆弱性 IBM Java Runtime Environment (JRE) には、Certificate Management System (CMS) のキーストアから秘密鍵を取得される脆弱性が存在します。 CVE-2014-3068 70355 CVE-2014-3068 31334 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005722.html 2014-11-12 2015-05-25 View