NetSight
IP …
low2.1

CVE-2015-5006

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16…

Impact

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.

Affected products

VendorProductAffected versions
IbmJava 2 Sdk
from 5.0.0.0 through 5.0.16.13
IbmJava Sdk
from 6.0.0.0 before 6.0.16.15
from 6.1.0.0. before 6.1.8.15
from 7.0.0.0 before 7.0.9.20
from 7.1.0.0 before 7.1.3.20
from 8.0.0.0 before 8.0.2.0
RedhatSatellite
Versions 5.6, 5.7
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12

Weakness classification

CWE-200

References