Red Hat Security Advisory

RHSA-2019:1326

Red Hat JBoss Fuse/A-MQ 6.3 R12 security and bug fix update

Released 2019-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2017-11063 CVE-2017-15089 · GHSA-46r5-59fg-2fjc

MEDIUM 43

It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02827 Published 2018-02-15 Partial fix · 9.2.0.CR1 CWE-502