CVE-2015-5006 Information disclosure in n/a
Physically proximate attackers can read the Kerberos Credential Cache to obtain sensitive information from IBM Java Security Components.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5006?
CVE-2015-5006 is a low-severity vulnerability in Redhat Enterprise Linux Desktop, published on 7 Dec 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
Weakness: CWE-200
Which versions are affected by CVE-2015-5006?
It affects 9 products.
Products include Ibm Java 2 Sdk, Ibm Java Sdk, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Workstation and 3 more.
How do I fix CVE-2015-5006?
Upgrade to a fixed version.
Is CVE-2015-5006 being exploited?
There is no known exploitation of CVE-2015-5006 in the wild and no public exploit code.
Sources
Also known as GHSA-rm84-76qf-3pxc.