Red Hat Security Advisory

RHSA-2023:7676

Red Hat Data Grid 8.4.6 security update

Released 2023-12-06 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-15127 CVE-2023-31582 · GHSA-7g24-qg88-p43q

MEDIUM 40

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2023-10-24 Partial fix · 0.9.3 CWE-331

TI-2023-04955 CVE-2023-5384 · GHSA-gg57-587f-h5v6

LOW 34

A flaw was found in Infinispan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00543 Published 2023-12-18 Fixed in 15.0.0.Dev07, 14.0.25.Final CWE-312

TI-2023-04230 CVE-2023-4586

LOW 33

A vulnerability was found in the Hot Rod client.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00548 Published 2023-10-04 Fixed CWE-20