{ "id": "CVE-2015-5041", "sourceIdentifier": "psirt@us.ibm.com", "published": "2016-06-06T17:59:00.220", "lastModified": "2019-06-19T16:16:33.343", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods." }, { "lang": "es", "value": "El JVM J9 en IBM SDK, Java Technology Edition 6 en versiones anteriores a SR16 FP20, 6 R1 en versiones anteriores a SR8 FP20, 7 en versiones anteriores a SR9 FP30 y 7 R1 en versiones anteriores a SR3 FP30 permite a atacantes remotos obtener informaci\u00f3n sensible o inyectar datos invocando a m\u00e9todos de interfaz no p\u00fablicos." } ], "metrics": { "cvssMetricV30": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL" }, "exploitabilityScore": 3.9, "impactScore": 5.2 } ], "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "NONE", "baseScore": 6.4 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 10.0, "impactScore": 4.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-200" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*", "versionStartIncluding": "6.0.0.0", "versionEndExcluding": "6.0.16.20", "matchCriteriaId": "9FB0DAB8-616B-499E-8BAE-9B57C848A21D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*", "versionStartIncluding": "6.1.0.0", "versionEndExcluding": "6.1.8.20", "matchCriteriaId": "5FA43541-321F-4620-BE4D-B3BED9A473FA" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*", "versionStartIncluding": "7.0.0.0", "versionEndExcluding": "7.0.9.30", "matchCriteriaId": "E89BE4AC-83E6-4E5E-9760-CF14C05852C6" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*", "versionStartIncluding": "7.1.0.0", "versionEndExcluding": "7.1.3.30", "matchCriteriaId": "908613AF-6B2B-405C-93B7-45161F82A9B6" } ] } ] }, { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*", "matchCriteriaId": "CB6476C7-03F2-4939-AB85-69AA524516D9" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*", "matchCriteriaId": "55C5561F-BE86-4EEA-99D4-8697F8BD9DFE" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*", "matchCriteriaId": "2076747F-A98E-4DD9-9B52-BF1732BCAD3D" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*", "matchCriteriaId": "D41A798E-0D69-43C7-9A63-1E5921138EAC" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*", "matchCriteriaId": "DB2A1559-651C-46B0-B436-8E03DC8A60D2" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*", "matchCriteriaId": "5A633996-2FD7-467C-BAA6-529E16BD06D1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*", "matchCriteriaId": "9C649194-B8C2-49F7-A819-C635EE584ABF" } ] } ] }, { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*", "versionEndIncluding": "3.0.9.20", "matchCriteriaId": "C95C690A-1763-4947-866E-0F3B18486643" } ] } ] }, { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*", "matchCriteriaId": "D4840254-CC76-4113-BC61-360BD15582B9" }, { "vulnerable": true, "criteria": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*", "matchCriteriaId": "85EA16E0-9261-45C4-840F-5366E9EAC5E1" } ] } ] } ], "references": [ { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00026.html", "source": "psirt@us.ibm.com", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00028.html", "source": "psirt@us.ibm.com", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00031.html", "source": "psirt@us.ibm.com", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00032.html", "source": "psirt@us.ibm.com", "tags": [ "Mailing List", "Third Party Advisory" ] }, { "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV72872", "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ] }, { "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21974194", "source": "psirt@us.ibm.com", "tags": [ "Vendor Advisory" ] }, { "url": "http://www.securityfocus.com/bid/82451", "source": "psirt@us.ibm.com", "tags": [ "Third Party Advisory", "VDB Entry" ] }, { "url": "https://access.redhat.com/errata/RHSA-2016:1430", "source": "psirt@us.ibm.com", "tags": [ "Third Party Advisory" ] } ] }