CVE-2015-5006
07.12.2015, 20:59
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | java_2_sdk | 5.0.0.0 ≤ 𝑥 ≤ 5.0.16.13 |
| ibm | java_sdk | 6.0.0.0 ≤ 𝑥 < 6.0.16.15 |
| ibm | java_sdk | 6.1.0.0. ≤ 𝑥 < 6.1.8.15 |
| ibm | java_sdk | 7.0.0.0 ≤ 𝑥 < 7.0.9.20 |
| ibm | java_sdk | 7.1.0.0 ≤ 𝑥 < 7.1.3.20 |
| ibm | java_sdk | 8.0.0.0 ≤ 𝑥 < 8.0.2.0 |
| redhat | satellite | 5.6 |
| redhat | satellite | 5.7 |
| redhat | enterprise_linux_desktop | 5.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 5.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_eus | 6.7 |
| redhat | enterprise_linux_server_eus | 7.2 |
| redhat | enterprise_linux_server_eus | 7.3 |
| redhat | enterprise_linux_server_eus | 7.4 |
| redhat | enterprise_linux_server_eus | 7.5 |
| redhat | enterprise_linux_workstation | 5.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| java-1.6.0-ibm |
| ||||
| java-1.6.0-ibm-demo |
| ||||
| java-1.6.0-ibm-devel |
| ||||
| java-1.6.0-ibm-javacomm |
| ||||
| java-1.6.0-ibm-jdbc |
| ||||
| java-1.6.0-ibm-plugin |
| ||||
| java-1.6.0-ibm-src |
| ||||
| java-1.7.1-ibm |
| ||||
| java-1.7.1-ibm-demo |
| ||||
| java-1.7.1-ibm-devel |
| ||||
| java-1.7.1-ibm-jdbc |
| ||||
| java-1.7.1-ibm-plugin |
| ||||
| java-1.7.1-ibm-src |
| ||||
| java-1.8.0-ibm |
| ||||
| java-1.8.0-ibm-demo |
| ||||
| java-1.8.0-ibm-devel |
| ||||
| java-1.8.0-ibm-jdbc |
| ||||
| java-1.8.0-ibm-plugin |
| ||||
| java-1.8.0-ibm-src |
|
Common Weakness Enumeration
References