IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_july2015_advisory | — | — | Nov 16, 2015 | Nov 16, 2015 |
| Aix 6.1 Java_july2015_advisory | — | — | Nov 16, 2015 | Nov 16, 2015 |
| Aix 7.1 Java_july2015_advisory | — | — | Nov 16, 2015 | Nov 16, 2015 |
| Ibm Aix | — | Apply the fix or workaround for java_july2015_advisory | Nov 30, 2017 | Jul 31, 2015 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 23, 2020 | Jan 23, 2020 |
| Suse | — | Upgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_6_0-ibm-pluginUpgrade java-1_6_0-ibm-alsaUpgrade java-1_7_1-ibm-alsaUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm-develUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_6_0-ibmUpgrade java-1_6_0-ibm-fontsUpgrade java-1_7_0-ibmUpgrade java-1_7_1-ibm-jdbc | Dec 18, 2015 | Jul 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub