Information disclosure in JRockit and Oracle Java SE - CVE-2017-10115

Vulnerability identifier: #VU8083

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-10115

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The weakness exists due to unknown error. A remote attacker can disclose important data on the target system

JRockit
Oracle Java SE
mGuard Device Manager
Planning Analytics Local
WebSphere MQIPT
IBM Algo One Core
IBM Cognos Controller
IBM Cognos Command Center
IBM AIX
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Satellite
IBM MQ

Install update form vendor's website.

• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

• Multiple vulnerability in Oracle products
• Multiple vulnerabilities in IBM AIX
• Multiple vulnerabilities in PHOENIX CONTACT mGuard Device Manager
• Multiple vulnerabilities in IBM Cognos Command Center
• Multiple vulnerabilities in IBM Cognos Controller
• Multiple vulnerabilities in IBM WebSphere MQ Internet Pass Thru
• Multiple vulnerabilities in IBM WebSphere MQ
• Information disclosure in IBM Algo One
• Multiple vulnerabilities in IBM Planning Analytics
• Red Hat update for java-1.8.0-ibm
• Red Hat update for java-1.6.0-ibm
• Red Hat update for java-1.8.0-ibm