CVE-2015-5235 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-5235 Interim 1 31 2024-07-27T01:14:19Z current 2021-05-30T13:31:51Z 2024-07-27T01:14:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-5235 IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-October/001613.html E-Mail link for SUSE-SU-2015:1682-1 https://lists.suse.com/pipermail/sle-security-updates/2015-October/001615.html E-Mail link for SUSE-SU-2015:1689-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVWSAA2LWIDZ5UDHH5HQGNILKV2RVAKB/#SVWSAA2LWIDZ5UDHH5HQGNILKV2RVAKB E-Mail link for openSUSE-SU-2015:1595-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Tumbleweed icedtea-web icedtea-web-1.5.3-0.9.1 icedtea-web-1.7.1-1.48 icedtea-web-1.7.1-5.13 icedtea-web-1.7.1-lp150.1.22 icedtea-web-1.7.1-lp152.5.67 icedtea-web-1.7.2-150100.7.3.1 icedtea-web-javadoc-1.6.2-3.3 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 java-1_7_0-openjdk-plugin-1.6.2-2.8.3 java-1_7_0-openjdk-plugin-1.6.2-3.3 java-1_8_0-openjdk-plugin java-1_8_0-openjdk-plugin-1.6.1-2.4.21 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 java-1_8_0-openjdk-plugin-1.6.2-3.3 icedtea-web-1.5.3-0.9.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 java-1_8_0-openjdk-plugin-1.6.1-2.4.21 as a component of SUSE Linux Enterprise Desktop 12 SP1 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 java-1_8_0-openjdk-plugin-1.6.1-2.4.21 as a component of SUSE Linux Enterprise Desktop 12 SP2 java-1_7_0-openjdk-plugin-1.6.2-2.8.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 java-1_7_0-openjdk-plugin-1.6.2-2.8.3 as a component of SUSE Linux Enterprise Desktop 12 SP4 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 as a component of SUSE Linux Enterprise Desktop 12 SP4 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 java-1_8_0-openjdk-plugin-1.6.1-2.4.21 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 java-1_8_0-openjdk-plugin-1.6.1-2.4.21 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 java-1_7_0-openjdk-plugin-1.6.2-2.8.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 java-1_7_0-openjdk-plugin-1.6.2-2.8.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 java-1_7_0-openjdk-plugin-1.6.1-2.3.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 java-1_8_0-openjdk-plugin-1.6.2-2.10.3 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 icedtea-web-1.7.1-1.48 as a component of SUSE Linux Enterprise Workstation Extension 15 icedtea-web-1.7.1-5.13 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 icedtea-web-1.7.1-5.13 as a component of SUSE Linux Enterprise Workstation Extension 15 SP2 icedtea-web-1.7.1-5.13 as a component of SUSE Linux Enterprise Workstation Extension 15 SP3 icedtea-web-1.7.2-150100.7.3.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 icedtea-web-1.7.1-lp150.1.22 as a component of openSUSE Leap 15.0 icedtea-web-1.7.1-lp152.5.67 as a component of openSUSE Leap 15.2 icedtea-web-javadoc-1.6.2-3.3 as a component of openSUSE Tumbleweed java-1_7_0-openjdk-plugin-1.6.2-3.3 as a component of openSUSE Tumbleweed java-1_8_0-openjdk-plugin-1.6.2-3.3 as a component of openSUSE Tumbleweed icedtea-web as a component of SUSE Linux Enterprise Desktop 11 SP2 icedtea-web as a component of SUSE Linux Enterprise Desktop 11 SP3 java-1_8_0-openjdk-plugin as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page. CVE-2015-5235 SUSE Linux Enterprise Desktop 11 SP4:icedtea-web-1.5.3-0.9.1 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Desktop 12 SP1:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Desktop 12 SP1:java-1_8_0-openjdk-plugin-1.6.1-2.4.21 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Desktop 12 SP2:java-1_8_0-openjdk-plugin-1.6.1-2.4.21 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-plugin-1.6.2-2.8.3 SUSE Linux Enterprise Desktop 12 SP3:java-1_8_0-openjdk-plugin-1.6.2-2.10.3 SUSE Linux Enterprise Desktop 12 SP4:java-1_7_0-openjdk-plugin-1.6.2-2.8.3 SUSE Linux Enterprise Desktop 12 SP4:java-1_8_0-openjdk-plugin-1.6.2-2.10.3 SUSE Linux Enterprise Workstation Extension 12:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Workstation Extension 12 SP1:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Workstation Extension 12 SP1:java-1_8_0-openjdk-plugin-1.6.1-2.4.21 SUSE Linux Enterprise Workstation Extension 12 SP2:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Workstation Extension 12 SP2:java-1_8_0-openjdk-plugin-1.6.1-2.4.21 SUSE Linux Enterprise Workstation Extension 12 SP3:java-1_7_0-openjdk-plugin-1.6.2-2.8.3 SUSE Linux Enterprise Workstation Extension 12 SP3:java-1_8_0-openjdk-plugin-1.6.2-2.10.3 SUSE Linux Enterprise Workstation Extension 12 SP4:java-1_7_0-openjdk-plugin-1.6.2-2.8.3 SUSE Linux Enterprise Workstation Extension 12 SP4:java-1_8_0-openjdk-plugin-1.6.2-2.10.3 SUSE Linux Enterprise Workstation Extension 12 SP5:java-1_7_0-openjdk-plugin-1.6.1-2.3.1 SUSE Linux Enterprise Workstation Extension 12 SP5:java-1_8_0-openjdk-plugin-1.6.2-2.10.3 SUSE Linux Enterprise Workstation Extension 15:icedtea-web-1.7.1-1.48 SUSE Linux Enterprise Workstation Extension 15 SP1:icedtea-web-1.7.1-5.13 SUSE Linux Enterprise Workstation Extension 15 SP2:icedtea-web-1.7.1-5.13 SUSE Linux Enterprise Workstation Extension 15 SP3:icedtea-web-1.7.1-5.13 SUSE Linux Enterprise Workstation Extension 15 SP4:icedtea-web-1.7.2-150100.7.3.1 openSUSE Leap 15.0:icedtea-web-1.7.1-lp150.1.22 openSUSE Leap 15.2:icedtea-web-1.7.1-lp152.5.67 openSUSE Tumbleweed:icedtea-web-javadoc-1.6.2-3.3 openSUSE Tumbleweed:java-1_7_0-openjdk-plugin-1.6.2-3.3 openSUSE Tumbleweed:java-1_8_0-openjdk-plugin-1.6.2-3.3 SUSE Linux Enterprise Desktop 11 SP2:icedtea-web SUSE Linux Enterprise Desktop 11 SP3:icedtea-web moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N