Red Hat Security AdvisoryRHSA-2017:1097
Red Hat JBoss Data Grid 7.1
Released 2017-04-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Data Grid 7.1
Fixes 2 records
Priority MEDIUM 46
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.11259 · Published 2017-04-13 · Partial fix · 4.0.37.Final, 4.1.1.Final CWE-835
Priority LOW 32
It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints.
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01559 · Published 2018-07-16 · Partial fix · 9.0.0 CWE-306
