RHEL 8 : infinispan (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - infinispan: Unsafe deserialization of malicious object injected into data cache CVE-2017-15089 Note that Nessus has...

io.apiman:apiman-gateway-engine-ispn (>=1.3.2.final, <=2.0.0.final), io.apiman:apiman-gateway-test (>=1.3.2.final, <=2.0.0.final) +36 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.1.9.final)

org.infinispan:infinispan-core MAVEN version 8.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - io.apiman:apiman-gateway-engine-ispn =1.3.2.final, =1.3.2.final, =1.3.2.final, =2.0.0.final -...

org.infinispan:infinispan-as-embedded-modules (7.1.0.cr2), org.infinispan:infinispan-cachestore-jdbc (7.1.0.cr2) +26 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.1.0.cr2)

org.infinispan:infinispan-core MAVEN version 7.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-embedded-modules 7.1.0.cr2 -...

org.hibernate:hibernate-infinispan (4.0.1.final), org.infinispan:infinispan-cachestore-bdbje (5.1.0.cr3) +21 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.0.cr3)

org.infinispan:infinispan-core MAVEN version 5.1.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-infinispan 4.0.1.final - org.infinispan:infinispan-cachestore-bdbje...

org.infinispan:infinispan-cachestore-bdbje (5.1.0.alpha1), org.infinispan:infinispan-cachestore-cassandra (5.1.0.alpha1) +18 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.0.alpha1)

org.infinispan:infinispan-core MAVEN version 5.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.1.0.alpha1 -...

org.infinispan:infinispan-cachestore-bdbje (5.1.5.cr1), org.infinispan:infinispan-cachestore-cassandra (5.1.5.cr1) +19 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.5.cr1)

org.infinispan:infinispan-core MAVEN version 5.1.5.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.1.5.cr1 -...

com.linkare:jpa.security (3.0.0), com.linkare:vt (3.0.1) +30 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.6.final)

org.infinispan:infinispan-core MAVEN version 5.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.linkare:jpa.security 3.0.0 - com.linkare:vt 3.0.1 -...

org.codehaus.fabric3:fabric3-cache-infinispan (>=1.9.5, <=2.0.1), org.infinispan:infinispan-cachestore-bdbje (5.1.5.final) +21 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.5.final)

org.infinispan:infinispan-core MAVEN version 5.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.codehaus.fabric3:fabric3-cache-infinispan =1.9.5, =2.0.1 -...

org.hibernate:hibernate-infinispan (4.0.0.final), org.infinispan:infinispan-cachestore-bdbje (5.1.0.cr1) +21 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.0.cr1)

org.infinispan:infinispan-core MAVEN version 5.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-infinispan 4.0.0.final - org.infinispan:infinispan-cachestore-bdbje...

org.entando.entando.plugins:entando-plugin-jpinfinispan (5.1.0), org.hibernate.ogm:hibernate-ogm-infinispan (5.0.0.beta1) +35 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.0.2.final)

org.infinispan:infinispan-core MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.entando.entando.plugins:entando-plugin-jpinfinispan 5.1.0 -...

org.infinispan:infinispan-cachestore-bdbje (5.2.0.beta5), org.infinispan:infinispan-cachestore-cassandra (5.2.0.beta5) +21 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.0.beta5)

org.infinispan:infinispan-core MAVEN version 5.2.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.2.0.beta5 -...

cloud.orbit:orbit-actor-benchmarks (0.8.1), cloud.orbit:orbit-actor-tests (0.8.1) +37 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.1.3.final)

org.infinispan:infinispan-core MAVEN version 8.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - cloud.orbit:orbit-actor-benchmarks 0.8.1 - cloud.orbit:orbit-actor-tests 0.8.1 -...

org.infinispan:infinispan-as-modules (5.2.11.cr1), org.infinispan:infinispan-cachestore-bdbje (5.2.11.cr1) +24 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.11.cr1)

org.infinispan:infinispan-core MAVEN version 5.2.11.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-as-modules 5.2.11.cr1 - org.infinispan:infinispan-cachestore-bdbje...

org.hibernate:hibernate-infinispan (>=5.0.0.beta1, <=5.0.0.beta2), org.infinispan:infinispan-as-embedded-modules (7.1.0.final) +27 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.1.0.final)

org.infinispan:infinispan-core MAVEN version 7.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-infinispan =5.0.0.beta1, =5.0.0.beta2 -...

org.hibernate:hibernate-search-infinispan (>=4.3.0.alpha1, <=4.3.0.final), org.hibernate:hibernate-search-modules (>=4.3.0.alpha1, <=4.3.0.final) +36 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.5.final)

org.infinispan:infinispan-core MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan =4.3.0.alpha1, =4.3.0.alpha1, =4.3.0.final -...

org.commonjava.aprox.wars:aprox-basic (>=0.4, <=0.5), org.commonjava.aprox.wars:aprox-rest-min (>=0.4, <=0.5) +31 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.7.final)

org.infinispan:infinispan-core MAVEN version 5.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.commonjava.aprox.wars:aprox-basic =0.4, =0.4, =0.4, =0.4, =0.4, =0.5 -...

org.hibernate:hibernate-search-infinispan (5.0.0.alpha2), org.hibernate:hibernate-search-modules (5.0.0.alpha2) +27 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (7.0.0.alpha1)

org.infinispan:infinispan-core MAVEN version 7.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan 5.0.0.alpha2 -...

io.apiman:apiman-gateway-engine-ispn (>=1.2.3.cr1, <=1.3.1.final), io.apiman:apiman-gateway-test (>=1.2.3.final, <=1.3.1.final) +42 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.1.2.final)

org.infinispan:infinispan-core MAVEN version 8.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - io.apiman:apiman-gateway-engine-ispn =1.2.3.cr1, =1.2.3.final, =1.2.3.cr1, =0.12.0, =0.13.0 -...

com.coherentlogic.coherent.data-model:data-adapter-application (>=1.0.24-release, <=1.0.26-release), com.coherentlogic.coherent.data-model:data-adapter-core (>=1.0.24-release, <=1.0.26-release) +97 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.2.4.final)

org.infinispan:infinispan-core MAVEN version 8.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.coherentlogic.coherent.data-model:data-adapter-application =1.0.24-release,...

com.geeoz.atom:atom-api (>=1.0.0, <=1.0d32), com.geeoz.atom:atom-kie (>=1.0.0, <=1.0d32) +93 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (6.0.2.final)

org.infinispan:infinispan-core MAVEN version 6.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1....