CVE:CVE-2015-5041
CNNVD:CNNVD-201602-331
IBM SDK, Java Technology Edition是美国IBM公司的一款用于Java应用程序开发的软件开发工具包。
IBM SDK, Java Technology Edition的J9 JVM中存在安全漏洞。远程攻击者可通过调用调用非公开接口方法利用该漏洞获取敏感信息或注入数据。以下版本受到影响：IBM SDK, Java Technology Edition SR16 FP20之前6版本，SR8 FP20之前6 R1版本，SR9 FP30之前7版本，SR3 FP30之前7 R1版本。
solution:Upgrade ibm java_sdk to a higher version than 6.0.16.20,6.1.8.20,7.0.9.30,7.1.3.30,and avoid the version [6.0.0.0,6.0.16.20),[6.1.0.0,6.1.8.20),[7.0.0.0,7.0.9.30),[7.1.0.0,7.1.3.30); Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp4,12:sp1,and avoid the version 11:sp2,11:sp4,12:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp4,12,12:sp1,and avoid the version 11:sp4,12,12:sp1; Upgrade suse suse_linux_enterprise_server to a higher version than 12,and avoid the version 12; Upgrade ibm websphere_application_server to a higher version than 3.0.9.20,and avoid the version (,3.0.9.20]; Upgrade redhat satellite to a higher version than 5.6,5.7,and avoid the version 5.6,5.7