Red Hat Security Advisory

RHSA-2020:3626

Red Hat Data Grid 8.1.0 Security Update

Released 2020-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Data Grid

Fixes 3 records

TI-2020-09314 CVE-2020-11612 · GHSA-mm9x-g8pc-w292

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while…

MEDIUM 45

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09188 Published 2020-04-07 Partial fix · 4.1.46 CWE-770

TI-2020-07597 CVE-2020-9488 · GHSA-vwqq-5vrc-xw9h

Improper certificate validation in Apache Log4j

LOW 29

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.08216 Published 2020-04-27 Partial fix · 2.12.3, 2.13.2 +1 CWE-295

TI-2020-08644 CVE-2020-10746 · GHSA-3g48-cr7g-6ph4

Missing authorization in Infinispan

LOW 27

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00236 Published 2020-10-19 Partial fix CWE-862