CVE-2014-3914

CVE-2014-3914 is a critical directory traversal vulnerability affecting the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2. This flaw allows unauthenticated remote attackers to perform various malicious actions, including creating, reading, executing, and deleting arbitrary files, as well as executing arbitrary code on the affected system. With a CVSS score of 10.0, the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. Exploit code is publicly available, including a Metasploit module, indicating a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.