CVE-2015-1914

published 2015-07-02

CVE-2015-1914: IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks"…

Priority P4 29 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	java	>= 5.0.0.0 < 5.0.16.10	5.0.16.10
ibm	java	>= 6.0.0.0 < 6.0.16.4	6.0.16.4
ibm	java	>= 6.1.0.0 < 6.1.8.4	6.1.8.4
ibm	java	>= 7.0.0.0 < 7.0.9.0	7.0.9.0
ibm	java	>= 7.1.0.0 < 7.1.3.0	7.1.3.0

CVSS provenance

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

vendor_redhat 5.0 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200