high8.8
CVE-2019-10174
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke priva…
Impact
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infinispan | Infinispan | before 8.2.12 from 9.0.0 before 9.4.17 |
| Redhat | Fuse | Version 1.0 |
| Redhat | Jboss Data Grid | All versions |
| Redhat | Jboss Enterprise Application Platform | All versions Version 7.2 |
| Redhat | Openshift Application Runtimes | All versions |
| Redhat | Single Sign-On | All versions |
| Netapp | Active Iq Unified Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2020:0481
- https://access.redhat.com/errata/RHSA-2020:0727
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10174
- https://security.netapp.com/advisory/ntap-20220210-0018/
- https://access.redhat.com/errata/RHSA-2020:0481
- https://access.redhat.com/errata/RHSA-2020:0727
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10174
- https://security.netapp.com/advisory/ntap-20220210-0018/