Red Hat Security AdvisoryRHSA-2021:0433
Red Hat Data Grid 8.1.1 security update
Released 2021-02-08 · Red Hat rating Moderate · View on Red Hat →
Fixes 3 records
Priority CRITICAL 87
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.84968 · Published 2020-11-16 · Partial fix · 1.4.14, 1.4.14-java7 CWE-78
Priority LOW 37
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02365 · Published 2020-10-06 · Partial fix · 1.1.3.Final CWE-401
Priority LOW 31
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.0108 · Published 2020-12-03 · Fixed in 11.0.6.Final CWE-862
