What is CVE-2015-5006?

CVE-2015-5006 is a vulnerability in Ibm Java_2_sdk, classified under Information Disclosure. Published 2015-12-07.

Is CVE-2015-5006 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Ibm Java_2_sdk

CVE-2015-5006

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by re…

Vulnerability class: Information Disclosure

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Java_2_sdk
Ibm Java_sdk
Redhat Enterprise_linux_desktop — versions 5.0, 6.0, 7.0
Redhat Enterprise_linux_server — versions 5.0, 6.0, 7.0
Redhat Enterprise_linux_server_eus — versions 6.7, 7.2, 7.3
Redhat Enterprise_linux_workstation — versions 5.0, 6.0, 7.0
Redhat Satellite — versions 5.6, 5.7
Suse Linux_enterprise_server — versions 11, 12
Suse Linux_enterprise_software_development_kit — versions 11, 12
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@us.ibm.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)

Frequently asked questions

What is CVE-2015-5006?: CVE-2015-5006 is a vulnerability in Ibm Java_2_sdk, classified under Information Disclosure. Published 2015-12-07.
Is CVE-2015-5006 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.