CVE-2014-3064: The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11....

Security readout for executives and security teams

CVE-2014-3064 lets an authenticated remote user read arbitrary files through the GDS component in affected IBM InfoSphere MDM products. The main business risk is exposure of server-side files such as configuration data or sensitive operational information. The source bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where the affected GDS component is deployed and reachable by authenticated users. Internet exposure is not stated in the sources. Organizations without these specific IBM InfoSphere MDM versions or without GDS exposure are less likely to be affected. Prioritize remediation if affected IBM MDM systems handle sensitive product, customer, supplier, or operational data. The issue is authenticated, which reduces opportunistic exposure, but arbitrary server-side file read can still create material confidentiality risk. Mitigation focus: Upgrade Collaborative Edition 10.x or 11.x to 11.0 FP4 or later.; For PIM 9.0 or 9.1, check IBM advisory guidance for supported fixes.; Restrict GDS access to trusted authenticated users only..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.