NetSight
IP …
medium5.5

CVE-2015-1931

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16…

Impact

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Affected products

VendorProductAffected versions
IbmJava Sdk
from 5.0.0.0 before 5.0.16.13
from 6.0.0.0 before 6.0.16.7
from 6.1.0.0 before 6.1.8.7
from 7.0.0.0 before 7.0.9.10
from 7.1.0.0 before 7.1.3.10
from 8.0.0.0 before 8.0.1.10
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatSatellite
Versions 5.6, 5.7
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.7, 7.1, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0

Weakness classification

CWE-312

References