Lucene search

Authorization Bypass

🗓️ 18 Nov 2019 03:08:10Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Infinispan authorization bypass vulnerability in ReflectionUtil class

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 23
osv	Use of Externally-Controlled Input to Select Classes or Code in Infinispan	24 May 202217:01	–	osv
osv	CVE-2019-10174	25 Nov 201911:15	–	osv
osv	RHSA-2020:2063 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2 security update	13 Sep 202419:58	–	osv
osv	RHSA-2024:5856 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update	29 Sep 202418:52	–	osv
prion	Design/Logic Flaw	25 Nov 201911:15	–	prion
cve	CVE-2019-10174	25 Nov 201911:15	–	cve
github	Use of Externally-Controlled Input to Select Classes or Code in Infinispan	24 May 202217:01	–	github
cvelist	CVE-2019-10174	25 Nov 201910:26	–	cvelist
redhatcve	CVE-2019-10174	14 Nov 201916:37	–	redhatcve
f5	K84408873 : Infinispan vulnerability CVE-2019-10174	1 May 202000:00	–	f5

Vulners

Node

infinispan-commons infinispan-commonsRange10.0.0.Alpha1–10.0.0.CR3java

infinispan-commons infinispan-commonsRange9.3.1.Final–9.4.18.Finaljava

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_6.sp5_redhat_1.1.ep7.el7

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_5.sp4_redhat_1.1.ep7.el7

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_2.sp2_redhat_00001.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_4.sp3_redhat_00002.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_7.sp6_redhat_00001.1.ep7.el6

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_4.sp3_redhat_00002.1.el8eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_5.sp3_redhat_00003.1.el6eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_6.sp3_redhat_00004.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.12_1.redhat_1.1.ep7.el7

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_3.sp3_redhat_00001.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.12_1.redhat_1.1.ep7.el6

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_3.sp3_redhat_00001.1.el6eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_5.sp3_redhat_00003.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_3.sp3_redhat_00001.1.el8eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_6.sp3_redhat_00004.1.el8eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_7.sp3_redhat_00005.1.el7eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_5.sp3_redhat_00003.1.el8eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_5.sp4_redhat_1.1.ep7.el6

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.12_2.sp4_redhat_1.1.ep7.el7

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_4.sp3_redhat_00002.1.el6eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.12_2.sp4_redhat_1.1.ep7.el6

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_6.sp5_redhat_1.1.ep7.el6

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_2.sp2_redhat_00001.1.el8eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_6.sp3_redhat_00004.1.el6eap

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.2.13_7.sp6_redhat_00001.1.ep7.el7

eap7-glassfish-jsf eap7-glassfish-jsfMatch2.3.5_2.sp2_redhat_00001.1.el6eap

eap7-infinispan eap7-infinispanMatch9.3.3_1.final_redhat_00001.1.el7eap

eap7-infinispan eap7-infinispanMatch9.3.6_1.final_redhat_00001.1.el6eap

eap7-infinispan eap7-infinispanMatch9.3.3_1.final_redhat_00001.1.el6eap

eap7-infinispan eap7-infinispanMatch9.3.6_1.final_redhat_00001.1.el7eap

eap7-infinispan eap7-infinispanMatch8.1.7_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.1.8_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.2.9_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.2.9_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.2.11_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.1.6_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.1.4_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.1.8_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.2.8_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.2.10_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.1.4_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch9.3.7_1.final_redhat_00001.1.el6eap

eap7-infinispan eap7-infinispanMatch8.1.2_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.1.7_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch9.3.7_1.final_redhat_00001.1.el8eap

eap7-infinispan eap7-infinispanMatch9.3.6_1.final_redhat_00001.1.el8eap

eap7-infinispan eap7-infinispanMatch8.1.6_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.2.11_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch9.3.7_1.final_redhat_00001.1.el7eap

eap7-infinispan eap7-infinispanMatch8.2.8_1.final_redhat_1.1.ep7.el7

eap7-infinispan eap7-infinispanMatch8.2.10_1.final_redhat_1.1.ep7.el6

eap7-infinispan eap7-infinispanMatch8.1.2_1.final_redhat_1.1.ep7.el6

Source	Link
github	www.github.com/infinispan/infinispan/commit/a7dab68d194989aaa0b0aa0781cf8ee88fbe3439
github	www.github.com/infinispan/infinispan/pull/7433
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20220210-0018/
access	www.access.redhat.com/errata/RHSA-2020:0481
access	www.access.redhat.com/errata/RHSA-2020:0727

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Nov 2019 03:10Current

4.6Medium risk

Vulners AI Score4.6

CVSS26.5

CVSS37.5 - 8.8

EPSS0.01073