CVE-2015-1931: IBM Java SDK
Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
Affected products
- IBM Java SDK: from 5.0.0.0, before 5.0.16.13 (fixed in 5.0.16.13); from 6.0.0.0, before 6.0.16.7 (fixed in 6.0.16.7); from 6.1.0.0, before 6.1.8.7 (fixed in 6.1.8.7); from 7.0.0.0, before 7.0.9.10 (fixed in 7.0.9.10); from 7.1.0.0, before 7.1.3.10 (fixed in 7.1.3.10); from 8.0.0.0, before 8.0.1.10 (fixed in 8.0.1.10)
- Red Hat Enterprise Linux Desktop: version 5.0 only; version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Eus: version 6.7 only; version 7.1 only; version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only
- Red Hat Enterprise Linux Server: version 5.0 only; version 6.0 only; version 7.0 only
- Red Hat Enterprise Linux Workstation: version 5.0 only; version 6.0 only; version 7.0 only
- Red Hat Satellite: version 5.6 only; version 5.7 only
- Suse Linux Enterprise Server: version 11 only
- Suse Linux Enterprise Software Development Kit: version 11 only
Published 2022-09-29. Last modified 2026-06-17.