VulnerabilityModified
CVE-2015-5006
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the…
LOW 2.1EPSS 0.48%
Does this matter?
Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/java 2 sdk · ibm/java sdk · redhat/satellite · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server eus · redhat/enterprise linux workstation · suse/linux enterprise server · suse/linux enterprise software development kit
- Source
- psirt@us.ibm.com
References
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2506.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2507.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2508.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2509.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78316Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21969225Vendor Advisory
- http://www.securityfocus.com/bid/77645Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034214Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2016:1430Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlMailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2506.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2507.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2508.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2509.htmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78316Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21969225Vendor Advisory
- http://www.securityfocus.com/bid/77645Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.