Improper implementation of the session fixation protection in Infinispan
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10158US | critical9.8 | — | ||
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect… | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10158WEB
- https://github.com/infinispan/infinispanPACKAGE
- https://github.com/infinispan/infinispan/commit/4b381c5910265972ccaabefbdbd16a2b929f6b72WEB
- https://github.com/infinispan/infinispan/commits/9.4.15.FinalWEB
- https://github.com/infinispan/infinispan/pull/6960WEB
- https://github.com/infinispan/infinispan/pull/7025WEB
- https://github.com/infinispan/infinispan/pull/7043WEB
- https://nvd.nist.gov/vuln/detail/CVE-2019-10158ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan