Detections
Analytics
CVE-2017-15089
high
Description
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
References
https://github.com/advisories/GHSA-46r5-59fg-2fjc
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2317
https://access.redhat.com/errata/RHSA-2019:1326
https://access.redhat.com/errata/RHSA-2018:0501
https://access.redhat.com/errata/RHSA-2018:0481
https://access.redhat.com/errata/RHSA-2018:0480