En resumen
- CVE-2017-15089 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a org.infinispan:infinispan-core, infinispan (infinispan).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.8%, mayor que el 86.6% de las vulnerabilidades.
- Solución: actualizar a 9.2.0.CR1 o posterior.
Description
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
NVD description
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
Más vulnerabilidades de org.infinispan:infinispan-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free