Lucene search
GoogleOSV:GHSA-H47X-2J37-FW5MHistoryMay 24, 2022 - 5:01 p.m.
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
2022-05-2417:01:50
Google
osv.dev
25
infinispan
vulnerability
unauthorized access
reflection
software
EPSS
0.003
Percentile
71.4%
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan’s privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
References
access.redhat.com/errata/RHSA-2020:0481
access.redhat.com/errata/RHSA-2020:0727
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10174
github.com/infinispan/infinispan
github.com/infinispan/infinispan/commit/5dbb05cfaca01a1a66732b82a0f5ba615ccbd214
github.com/infinispan/infinispan/commit/7bdc2822ccf79127a488130239c49a5e944e3ca2
nvd.nist.gov/vuln/detail/CVE-2019-10174
security.netapp.com/advisory/ntap-20220210-0018
Related
prion
prion
Design/Logic Flaw
2019-11-25 11:15:00
cvelist
cvelist
CVE-2019-10174
2019-11-25 10:26:16
cve
cve
CVE-2019-10174
2019-11-25 11:15:10
github
github
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
2022-05-24 17:01:50
osv
osv
CVE-2019-10174
2019-11-25 11:15:10
symantec
symantec
Infinispan CVE-2019-10174 Privilege Escalation Vulnerability
2019-11-14 00:00:00
veracode
veracode
Authorization Bypass
2019-11-18 03:10:08
nvd
nvd
CVE-2019-10174
2019-11-25 11:15:10
f5
f5
K84408873 : Infinispan vulnerability CVE-2019-10174
2020-05-01 00:00:00
redhatcve
redhatcve
CVE-2019-10174
2019-11-14 16:37:43
redhat
redhat
nessus
nessus