CVE-2015-5006: IBM Java 2 SDK

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.

Affected products

• IBM Java 2 SDK: from 5.0.0.0, up to and including 5.0.16.13
• IBM Java SDK: from 6.0.0.0, before 6.0.16.15 (fixed in 6.0.16.15); from 6.1.0.0., before 6.1.8.15 (fixed in 6.1.8.15); from 7.0.0.0, before 7.0.9.20 (fixed in 7.0.9.20); from 7.1.0.0, before 7.1.3.20 (fixed in 7.1.3.20); from 8.0.0.0, before 8.0.2.0 (fixed in 8.0.2.0)
• Red Hat Enterprise Linux Desktop: version 5.0 only; version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server: version 5.0 only; version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server Eus: version 6.7 only; version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only
• Red Hat Enterprise Linux Workstation: version 5.0 only; version 6.0 only; version 7.0 only
• Red Hat Satellite: version 5.6 only; version 5.7 only
• Suse Linux Enterprise Server: version 11 only; version 12 only
• Suse Linux Enterprise Software Development Kit: version 11 only; version 12 only

Published 2015-12-07. Last modified 2026-06-17.