CVE:CVE-2015-5006
CNNVD:CNNVD-201511-336
IBM SDK和IBM Java都是美国IBM公司的产品。IBM SDK是一套用于创建、发现、调用和测试Web服务的集成工具包。IBM Java是一个Java程序设计语言。IBM Java Security是其中的一个Java安全组件。
IBM SDK, Java Technology Edition的IBM Java Security Components中存在安全漏洞。物理位置临近的攻击者可通过读取Kerberos Credential缓存利用该漏洞获取敏感信息。以下版本受到影响：IBM SDK, Java Technology Edition SR2之前8版本，SR3 FP20之前7 R1版本，SR9 FP20之前7版本，SR8 FP15之前6 R1版本，SR16 FP15之前6版本。
solution:Upgrade ibm java_2_sdk to a higher version than 5.0.16.13,and avoid the version [5.0.0.0,5.0.16.13]; Upgrade ibm java_sdk to a higher version than 6.0.16.15,6.1.8.15,7.0.9.20,7.1.3.20,8.0.2.0,and avoid the version [6.0.0.0,6.0.16.15),[6.1.0.0.,6.1.8.15),[7.0.0.0,7.0.9.20),[7.1.0.0,7.1.3.20),[8.0.0.0,8.0.2.0); Upgrade redhat satellite to a higher version than 5.6,5.7,and avoid the version 5.6,5.7; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,and avoid the version 6.7,7.2,7.3,7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,11:sp4,12,and avoid the version 11:sp2,11:sp3,11:sp4,12; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp3,11:sp4,12,and avoid the version 11:sp3,11:sp4,12