Improper Access Control in infinispan-server-runtime

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-25711 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• security.netapp.com/advisory/ntap-20220210-0023 · WEB
• security.netapp.com/advisory/ntap-20220210-0023 · Third Party Advisory

Lỗ hổng khác của org.infinispan:infinispan-core

• CVE-2023-5384THẤP 2.7A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with…
• CVE-2019-10158NGHIÊM TRỌNG 9.8A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Ses…
• CVE-2019-10174CAO 8.8A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application cl…
• CVE-2016-0750CAO 8.8The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious…
• CVE-2018-1131CAO 8.8Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with au…