CVE-2015-1931
Medium
Description
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Ibm Java Sdk
PublishedSep 29, 2022
First seenSep 29, 2022
How to fix
Update
- ibm java_sdk5.0.16.13, 6.0.16.7, 6.1.8.7, 7.0.9.10, 7.1.3.10, 8.0.1.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm java_sdk | 5.0.0.0 ≤ v < 5.0.16.13, 6.0.0.0 ≤ v < 6.0.16.7, 6.1.0.0 ≤ v < 6.1.8.7, 7.0.0.0 ≤ v < 7.0.9.10, 7.1.0.0 ≤ v < 7.1.3.10, 8.0.0.0 ≤ v < 8.0.1.10 | 5.0.16.13, 6.0.16.7, 6.1.8.7, 7.0.9.10, 7.1.3.10, 8.0.1.10 |
| suse linux_enterprise_server | 11 | — |
| suse linux_enterprise_software_development_kit | 11 | — |
| redhat satellite | 5.6, 5.7 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_eus | 6.7, 7.1, 7.2, 7.3, 7.4, 7.5 | — |
| redhat enterprise_linux_server | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0, 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.