IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1931
Reference (s):
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html
- http://rhn.redhat.com/errata/RHSA-2015-1485.html
- http://rhn.redhat.com/errata/RHSA-2015-1486.html
- http://rhn.redhat.com/errata/RHSA-2015-1488.html