com.ecfront.dew:cluster-spi-ignite (1.2.2-rc), com.github.dexecutor:dexecutor-ignite (1.1.0) +62 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (>=2.0.0, <=2.3.0)

org.apache.ignite:ignite-core MAVEN version =2.0.0, =2.2.0, =3.0.0-rc1, =1.0.8, =2.3.0-release, =1.0.0-release, =3.5.0.beta1, =3.5.0.beta1, =3.6.0.cr1, =0.0.2, =2.20.0, =2.20.0, =2.0.0, =2.0.0, =2.3.0 and more Source cves: CVE-2018-1295 Source advisory: OSV:GHSA-CHP4-RV79-68J3...

org.apache.ignite:ignite-aop (1.1.0-incubating), org.apache.ignite:ignite-aws (1.1.0-incubating) +22 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.1.0-incubating)

org.apache.ignite:ignite-core MAVEN version 1.1.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.1.0-incubating - org.apache.ignite:ignite-aws...

org.apache.ignite:ignite-aop (1.0.0-rc1), org.apache.ignite:ignite-aws (1.0.0-rc1) +22 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.0.0-rc1)

org.apache.ignite:ignite-core MAVEN version 1.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.0.0-rc1 - org.apache.ignite:ignite-aws 1.0.0-rc1 -...

org.apache.ignite:ignite-aop (1.3.0-incubating), org.apache.ignite:ignite-aws (1.3.0-incubating) +24 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.3.0-incubating)

org.apache.ignite:ignite-core MAVEN version 1.3.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.3.0-incubating - org.apache.ignite:ignite-aws...

com.github.itzmedinesh:micro-cache-grid (1.0.0), com.github.pires:apache-ignite-discovery-kubernetes (>=1.0, <=1.0_1) +52 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.6.0)

org.apache.ignite:ignite-core MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.github.itzmedinesh:micro-cache-grid 1.0.0 - com.github.pires:apache-ignite-discovery-kubernetes...

com.ecfront.dew:cluster-spi-ignite (>=1.0.0, <=1.1.4), com.fnklabs.draenei:ignite (0.8.5) +47 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.9.0)

org.apache.ignite:ignite-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.ecfront.dew:cluster-spi-ignite =1.0.0, =2.0.7-release, =3.4.0, =3.4.0, =2.19.0, =2.19.0, =2.19.5 ...

com.github.rubanm:ignite-scala_2.10 (0.0.1), com.github.rubanm:ignite-scala_2.11 (0.0.1) +23 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.0.0)

org.apache.ignite:ignite-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.github.rubanm:ignite-scala2.10 0.0.1 - com.github.rubanm:ignite-scala2.11 0.0.1 -...

org.apache.ignite:ignite-aop (1.5.0-b1), org.apache.ignite:ignite-aws (1.5.0-b1) +31 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.5.0-b1)

org.apache.ignite:ignite-core MAVEN version 1.5.0-b1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.5.0-b1 - org.apache.ignite:ignite-aws 1.5.0-b1 -...

org.apache.ignite:ignite-aop (1.0.0-rc3), org.apache.ignite:ignite-aws (1.0.0-rc3) +21 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.0.0-rc3)

org.apache.ignite:ignite-core MAVEN version 1.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.0.0-rc3 - org.apache.ignite:ignite-aws 1.0.0-rc3 -...

com.srotya.tau:tau-alerts (>=0.0.5, <=0.0.8), com.srotya.tau:tau-dengine (>=0.0.5, <=0.0.8) +37 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.4.0)

org.apache.ignite:ignite-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - com.srotya.tau:tau-alerts =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.16.0-rc1, =0.0.18, =0.0.18, =0.0.18,...

com.ecfront.dew:cluster-spi-ignite (1.2.2-rc), com.github.dexecutor:dexecutor-ignite (1.1.0) +62 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (>=2.0.0, <=2.3.0)

org.apache.ignite:ignite-core MAVEN version =2.0.0, =2.2.0, =3.0.0-rc1, =1.0.8, =2.3.0-release, =1.0.0-release, =3.5.0.beta1, =3.5.0.beta1, =3.6.0.cr1, =0.0.2, =2.20.0, =2.20.0, =2.0.0, =2.0.0, =2.3.0 and more Source cves: CVE-2018-1295 Source advisory: GHSA-CHP4-RV79-68J3...

org.apache.ignite:ignite-aop (1.2.0-incubating), org.apache.ignite:ignite-aws (1.2.0-incubating) +23 more potentially affected by CVE-2018-1295 via org.apache.ignite:ignite-core (1.2.0-incubating)

org.apache.ignite:ignite-core MAVEN version 1.2.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ignite:ignite-core and may be impacted: - org.apache.ignite:ignite-aop 1.2.0-incubating - org.apache.ignite:ignite-aws...

Critical: Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R7 security and bug fix update

An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

CVE-2018-1295

In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...

CVE-2018-1295

CVE-2018-1295 affects Apache Ignite 2.3 and earlier. The root cause is the serialization mechanism lacking a whitelist of allowed classes, enabling arbitrary code execution when a crafted serialized object is deserialized at endpoints such as discovery SPI, Ignite persistence, Memcached endpoint,...