PT-2015-5507 · Ibm+2 · Ibm Sdk+3

CVE-2015-1931 · Publicado 2015-07-22 · Atualizado 2022-09-30

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SDK, Java Technology Edition versions 8 before SR1 FP10 IBM SDK, Java Technology Edition 7 R1 before SR3 FP10 IBM SDK, Java Technology Edition 7 before SR9 FP10 IBM SDK, Java Technology Edition 6 R1 before SR8 FP7 IBM SDK, Java Technology Edition 6 before SR16 FP7 IBM SDK, Java Technology Edition 5.0 before SR16 FP13

Description The issue allows local users to obtain sensitive information by reading a file, as plaintext information is stored in memory dumps.

Recommendations For IBM SDK, Java Technology Edition 8 before SR1 FP10, update to SR1 FP10 or later. For IBM SDK, Java Technology Edition 7 R1 before SR3 FP10, update to SR3 FP10 or later. For IBM SDK, Java Technology Edition 7 before SR9 FP10, update to SR9 FP10 or later. For IBM SDK, Java Technology Edition 6 R1 before SR8 FP7, update to SR8 FP7 or later. For IBM SDK, Java Technology Edition 6 before SR16 FP7, update to SR16 FP7 or later. For IBM SDK, Java Technology Edition 5.0 before SR16 FP13, update to SR16 FP13 or later.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2015-1931

RHSA-2015:1485

RHSA-2015:1486

RHSA-2015:1488

RHSA-2015:1544

RHSA-2015:1604

RHSA-2015_1485

RHSA-2015_1486

RHSA-2015_1544

SUSE-SU-2015:1329-1

SUSE-SU-2015:1331-1

SUSE-SU-2015:1345-1

SUSE-SU-2015:1375-1

SUSE-SU-2015:1509-1

SUSE-SU-2015_1329-1

SUSE-SU-2015_1331-1

SUSE-SU-2015_1345-1

SUSE-SU-2015_1509-1

Produtos afetados

Ibm Aix

Ibm Sdk

Red Hat

Suse

Referências · 113

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Nota
• https://github.com/fatlan/HAProxy-Keepalived-Sec-HighLoads · Nota
• https://access.redhat.com/security/cve/CVE-2015-4729 · Nota
• https://suse.com/security/cve/CVE-2015-4749.html · Nota
• https://suse.com/security/cve/CVE-2015-4749 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2015:1331-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-0192 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://osv.dev/vulnerability/SUSE-SU-2015:1509-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2015:1329-1 · Aviso do Fabricante
• https://t.me/cvenotify/36954 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2015-4733 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1488.html · Nota
• https://bdu.fstec.ru/vul/2015-11042 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-2632 · Nota