CVE-2015-5006
LOW severity · CVSS 2.1 · Information disclosure
2.1CVSS LOW
Summary
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)0%
AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2015-2506.htmlAdvisory