CVE-2017-15089CWE-502

CVE-2017-15089: vulnerability in infinispan

Published · Updated

Follow this CVE+ Monitor infinispan+ Monitor org.infinispan:infinispan-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.
Affected products
Infinispan · infinispan