JDK: plain text data stored in memory dumps
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 Supplementary | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1486 | 2015-07-22T00:00:00Z |
| java-1.7.0-ibm-1:1.7.0.9.10-1jpp.2.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1488 | 2015-07-23T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el5 | cpe:/a:redhat:rhel_extras:5 | RHSA-2015:1544 | 2015-08-04T00:00:00Z |
| Red Hat Enterprise Linux 6 Supplementary | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1486 | 2015-07-22T00:00:00Z |
| java-1.5.0-ibm-1:1.5.0.16.13-1jpp.3.el6_7 | cpe:/a:redhat:rhel_extras:6 | RHSA-2015:1544 | 2015-08-04T00:00:00Z |
| Red Hat Satellite 5.6 | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.6::el5 | RHSA-2015:1604 | 2015-08-12T00:00:00Z |
| Red Hat Satellite 5.7 | |||
| java-1.6.0-ibm-1:1.6.0.16.7-1jpp.1.el6_7 | cpe:/a:redhat:network_satellite:5.7::el6 | RHSA-2015:1604 | 2015-08-12T00:00:00Z |
| Supplementary for Red Hat Enterprise Linux 7 | |||
| java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b_1 | cpe:/a:redhat:rhel_extras:7 | RHSA-2015:1485 | 2015-07-22T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2015-2036 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file. |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.222% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.