In breve
- CVE-2017-15089 è una vulnerabilità ALTO (CVSS 8.8) che riguarda org.infinispan:infinispan-core, infinispan (infinispan).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.6% delle vulnerabilità.
- Correzione: aggiornare a 9.2.0.CR1 o successiva.
Description
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
NVD description
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
Altre vulnerabilità di org.infinispan:infinispan-core
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free