Information disclosure in Ibm Java

CVE-2015-1914

IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.

Vulnerability class: Information Disclosure

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Java
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)