CVE-2015-5006

NIEDRIG 2.1CVE-2015-5006 · Published 07/12/2015 · updated 17/06/2026

Kurz gesagt

CVE-2015-5006 ist eine Schwachstelle (NIEDRIG (CVSS 2.1)) in java 2 sdk (ibm), java sdk (ibm), satellite (redhat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.48%, höher als bei 41.5% aller Schwachstellen.
Abhilfe: auf 6.0.16.15, 6.1.8.15, 7.0.9.20, 7.1.3.20 oder neuer aktualisieren.

Package	Affected versions	Patched versions
java 2 sdk ibm	`≥ 5.0.0.0, ≤ 5.0.16.13`	No fix yet
java sdk ibm	`≥ 6.0.0.0, < 6.0.16.15≥ 6.1.0.0., < 6.1.8.15≥ 7.0.0.0, < 7.0.9.20≥ 7.1.0.0, < 7.1.3.20≥ 8.0.0.0, < 8.0.2.0`	`6.0.16.156.1.8.157.0.9.207.1.3.208.0.2.0`
satellite redhat	`= 5.6= 5.7`	No fix yet

Description

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.

References

lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · Mailing List
rhn.redhat.com/errata/RHSA-2015-2506.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-2507.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-2508.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free