2017-10-16 12:31:07 -04:00
{
2019-07-23 23:00:57 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2015-0226" ,
"STATE" : "PUBLIC"
2019-03-18 00:06:50 +00:00
} ,
2019-07-23 23:00:57 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"product" : {
"product_data" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"product_name" : "n/a" ,
"version" : {
"version_data" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"version_value" : "n/a"
2019-03-18 00:06:50 +00:00
}
]
}
}
]
} ,
2019-07-23 23:00:57 +00:00
"vendor_name" : "n/a"
2019-03-18 00:06:50 +00:00
}
]
}
} ,
2019-07-23 23:00:57 +00:00
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
2017-10-30 10:06:23 -04:00
{
2019-07-23 23:00:57 +00:00
"lang" : "eng" ,
"value" : "Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487."
2017-10-30 10:06:23 -04:00
}
2019-03-18 00:06:50 +00:00
]
} ,
2019-07-23 23:00:57 +00:00
"problemtype" : {
"problemtype_data" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"description" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"lang" : "eng" ,
"value" : "n/a"
2019-03-18 00:06:50 +00:00
}
]
}
]
} ,
2019-07-23 23:00:57 +00:00
"references" : {
"reference_data" : [
2019-03-18 00:06:50 +00:00
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2016:1376" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2016:1376"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:0849" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-0849.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:1176" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-1176.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:1177" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-1177.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:0848" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-0848.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:0846" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-0846.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us" ,
"refsource" : "CONFIRM" ,
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc" ,
"refsource" : "CONFIRM" ,
"url" : "https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "RHSA-2015:0847" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2015-0847.html"
2019-03-18 00:06:50 +00:00
} ,
{
2019-07-23 23:00:57 +00:00
"name" : "72553" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/72553"
2019-07-16 13:25:12 -07:00
} ,
{
2019-07-23 23:00:57 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
2019-03-18 00:06:50 +00:00
}
]
}
}
