IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass “permission checks” and obtain sensitive information via vectors related to the Java Virtual Machine.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1914
Reference (s):
- AIXAPAR:IV72245
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245
- AIXAPAR:IV72246
- URL: http://www-01.ibm.com/support/docview.wss?uid=swg1IV72246
- BID:74645