Skip to content
OpenAdvisories
Unscored CVE-2015-5006 EUVD-2015-5023GHSA-rm84-76qf-3pxc

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP1…

Published Dec 7, 2015 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.3.20-1jpp.1.el7 RHSA-2015:2506
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.2.0-1jpp.1.el7 RHSA-2015:2509
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.15-1jpp.1.el6_7 RHSA-2015:2508
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.3.20-1jpp.1.el6_7 RHSA-2015:2506
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.16.15-1jpp.1.el5 RHSA-2015:2508
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.9.20-1jpp.1.el5 RHSA-2015:2507
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Network Satellite 5 java-1.7.0-ibm +1 1:1.7.0.9.40-1jpp.1.el5 RHSA-2016:1430
Red Hat Network Satellite 5 java-1.7.1-ibm +1 1:1.7.1.3.40-1jpp.1.el6_7 RHSA-2016:1430
Red Hat Network Satellite 5 spacewalk-java +5 2.0.2-109.el5sat RHSA-2016:1430

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 java-1_7_1-ibm 1.7.1_sr3.20-18.1 SUSE-SU-2015:2168-2
SLES 12 SP1 java-1_8_0-ibm 1.8.0_sr2.0-4.1 SUSE-SU-2015:2268-1
SLES 12 java-1_6_0-ibm 1.6.0_sr16.15-27.1 SUSE-SU-2015:2192-1
SLES 12 java-1_7_1-ibm 1.7.1_sr3.20-18.1 SUSE-SU-2015:2168-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr3.20-6.1 SUSE-SU-2015:2182-1
SLES 11 SP3 java-1_6_0-ibm 1.6.0_sr16.15-46.1 SUSE-SU-2015:2166-1
SLES 11 SP3 java-1_7_0-ibm 1.7.0_sr9.20-42.1 SUSE-SU-2015:2216-1
SLES 11 SP2 java-1_6_0-ibm 1.6.0_sr16.15-46.1 SUSE-SU-2015:2166-1
SLES 11 SP2 java-1_7_0-ibm 1.7.0_sr9.20-42.1 SUSE-SU-2015:2216-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 java-1_7_1-ibm 1.7.1_sr3.20-18.1 SUSE-SU-2015:2168-2
SLES for SAP 12 SP1 java-1_8_0-ibm 1.8.0_sr2.0-4.1 SUSE-SU-2015:2268-1
SLES for SAP 12 java-1_7_1-ibm 1.7.1_sr3.20-18.1 SUSE-SU-2015:2168-1
SLES for SAP 11 SP4 java-1_7_1-ibm 1.7.1_sr3.20-6.1 SUSE-SU-2015:2182-1
SLES for SAP 11 SP3 java-1_6_0-ibm 1.6.0_sr16.15-46.1 SUSE-SU-2015:2166-1
SLES for SAP 11 SP3 java-1_7_0-ibm 1.7.0_sr9.20-42.1 SUSE-SU-2015:2216-1

Advisories 12

References