← Back

CVE-2015-1931

nvd nist
Published: Sep 29, 2022Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Affected (30)

Ibm
1 product
Java Sdk
Suse
2 products
Linux Enterprise Server
Linux Enterprise Software Development Kit
Redhat
5 products
Enterprise Linux Desktop
Enterprise Linux Eus
Enterprise Linux Server
Enterprise Linux Workstation
Satellite
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Java Sdk
From 5.0.0.0 to 5.0.16.13
Java Sdk
From 6.0.0.0 to 6.0.16.7
Java Sdk
From 6.1.0.0 to 6.1.8.7
Java Sdk
From 7.0.0.0 to 7.0.9.10
Java Sdk
From 7.1.0.0 to 7.1.3.10
Java Sdk
From 8.0.0.0 to 8.0.1.10
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Suse
Linux Enterprise Server
Version 11 sp1
Linux Enterprise Server
Version 11 sp2
Linux Enterprise Server
Version 11 sp3
Linux Enterprise Server
Version 11 sp3
Linux Enterprise Server
Version 11 sp4
Suse
Linux Enterprise Software Development Kit
Version 11 sp3
Linux Enterprise Software Development Kit
Version 11 sp4
Configuration C
17 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Desktop
Version 5.0
Enterprise Linux Desktop
Version 6.0
Enterprise Linux Desktop
Version 7.0
Redhat
Enterprise Linux Eus
Version 6.7
Enterprise Linux Eus
Version 7.1
Enterprise Linux Eus
Version 7.2
Enterprise Linux Eus
Version 7.3
Enterprise Linux Eus
Version 7.4
Enterprise Linux Eus
Version 7.5
Redhat
Enterprise Linux Server
Version 5.0
Enterprise Linux Server
Version 6.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Workstation
Version 5.0
Enterprise Linux Workstation
Version 6.0
Enterprise Linux Workstation
Version 7.0
Redhat
Satellite
Version 5.6
Satellite
Version 5.7

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (20)

Source: psirt@us.ibm.com
Mailing ListThird Party Advisory
Source: psirt@us.ibm.com
Mailing ListThird Party Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.