Read the docs
Red Hat Security Advisory

RHSA-2020:5410

Red Hat Data Grid 7.3.8 security update

Released 2020-12-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611
TI-2020-15661 CVE-2020-25644 · GHSA-hxj4-885f-grgp

Memory leak in wildfly-openssl

Priority LOW 37

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02365 Published 2020-10-06 Partial fix · 1.1.3.Final CWE-401