CVE-2018-1131: Red Hat, Inc. infinispan vulnerability
Red Hat, Inc. · infinispan
Vendor fix available · Affected: Red Hat, Inc. infinispan · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 68% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Red Hat, Inc. · infinispan9.0.3.Final; 9.1.7.Final; 8.2.10.Final; 9.2.2.Final; 9.3.0.Alpha1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Red Hat, Inc.
- Published
- May 2018
CoverageNo articles yet
No CyberSIXT article names CVE-2018-1131 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.