CVEvulnerability

CVE-2015-1931

5.5 MEDIUM Published 2022-09-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-312

Description

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Affected configurations

• ibm java sdk (>= 5.0.0.0 < 5.0.16.13) • ibm java sdk (>= 6.0.0.0 < 6.0.16.7) • ibm java sdk (>= 6.1.0.0 < 6.1.8.7) • ibm java sdk (>= 7.0.0.0 < 7.0.9.10) • ibm java sdk (>= 7.1.0.0 < 7.1.3.10) • ibm java sdk (>= 8.0.0.0 < 8.0.1.10) • suse linux enterprise server 11 • suse linux enterprise software development kit 11 • redhat satellite 5.6 • redhat satellite 5.7 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 6.7 • redhat enterprise linux eus 7.1 • redhat enterprise linux eus 7.2 • redhat enterprise linux eus 7.3 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References