Latest Infinispan Vulnerabilities

A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as th...

Infinispan Infinispan-server-rest>=10.0.0<11.0.12

Infinispan Infinispan-server-rest>=12.0.0<12.1.4

Redhat Data Grid=8.0.0

Redhat Data Grid=8.0.1

Redhat Data Grid=8.1.0

Redhat Data Grid=8.1.1

● CVE-2020-25711

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can ...

redhat/Infinispan<11.0.6

Infinispan Infinispan<11.0.6

Redhat Data Grid=8.0

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

● CVE-2020-10771

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request...

Infinispan Infinispan-server-rest=10.0.0

Redhat Data Grid=8.0

NetApp OnCommand Insight

● CVE-2020-10746

Infinispan permits local access to controls via both REST and HotRod APIs. A user authed to the local machine could perform all operations on the caches, including creation, update, deletion, and shut...

redhat/Infinispan<11.0.0

Infinispan Infinispan-server-runtime=10.0.0

● CVE-2019-10158

A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.

<=9.4.14

=7.0.0

Infinispan Infinispan<=9.4.14

Redhat Jboss Data Grid=7.0.0

maven/org.infinispan:infinispan-core<9.4.15.Final

● CVE-2019-10174

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's...

redhat/eap7-glassfish-jsf<0:2.3.5-11.SP3_redhat_00009.1.el6ea

redhat/eap7-infinispan<0:9.3.9-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-11.SP3_redhat_00009.1.el7ea

redhat/eap7-infinispan<0:9.3.9-1.Final_redhat_00001.1.el7ea

redhat/eap7-glassfish-jsf<0:2.3.5-11.SP3_redhat_00009.1.el8ea

redhat/eap7-infinispan<0:9.3.9-1.Final_redhat_00001.1.el8ea

and 17 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.