CVEvulnerability

CVE-2015-5041

9.1 CRITICAL Published 2016-06-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.1 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-200

Description

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.

Affected configurations

• ibm java sdk (>= 6.0.0.0 < 6.0.16.20) • ibm java sdk (>= 6.1.0.0 < 6.1.8.20) • ibm java sdk (>= 7.0.0.0 < 7.0.9.30) • ibm java sdk (>= 7.1.0.0 < 7.1.3.30) • suse linux enterprise server 11 • suse linux enterprise server 12 • suse linux enterprise software development kit 11 • suse linux enterprise software development kit 12 • suse suse linux enterprise server 12 • ibm websphere application server (<= 3.0.9.20) • redhat satellite 5.6 • redhat satellite 5.7

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References