PT-2015-2473 · Oracle+2 · Java Platform+2

Published 2015-10-21 · Updated 2024-06-15 · CVE-2015-4906

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Java Platform (affected versions not specified)

Description The issue is related to errors in the code of the Java Platform. It allows a remote attacker to gain read access to protected information using a Java Web Start application or a Java applet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11838

CVE-2015-4906

OPENSUSE-SU-2015_1905-1

OPENSUSE-SU-2016_0270-1

OPENSUSE-SU-2024:10197-1

RHSA-2015:1926

RHSA-2015_1926

Affected Products

Java Platform

Red Hat

Suse

References · 200

• https://bdu.fstec.ru/vul/2015-11836 · Security Note
• https://bdu.fstec.ru/vul/2016-00159 · Security Note
• https://bdu.fstec.ru/vul/2015-11866 · Security Note
• https://bdu.fstec.ru/vul/2015-11856 · Security Note
• https://bdu.fstec.ru/vul/2016-00151 · Security Note
• https://bdu.fstec.ru/vul/2015-11921 · Security Note
• https://bdu.fstec.ru/vul/2015-11890 · Security Note
• https://security.gentoo.org/glsa/201603-11 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-4906 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4906 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4906 · Security Note
• https://bdu.fstec.ru/vul/2015-11878 · Security Note