Lucene search
GoogleOSV:GHSA-6X3V-RW2Q-9GX7HistoryJan 21, 2020 - 9:18 p.m.
Improper implementation of the session fixation protection in Infinispan
2020-01-2121:18:44
Google
osv.dev
16
EPSS
0.004
Percentile
72.9%
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10158
github.com/infinispan/infinispan
github.com/infinispan/infinispan/commit/4b381c5910265972ccaabefbdbd16a2b929f6b72
github.com/infinispan/infinispan/commits/9.4.15.Final
github.com/infinispan/infinispan/pull/6960
github.com/infinispan/infinispan/pull/7025
github.com/infinispan/infinispan/pull/7043
nvd.nist.gov/vuln/detail/CVE-2019-10158
security.netapp.com/advisory/ntap-20231227-0009
Related
osv
osv
CVE-2019-10158
2020-01-02 15:15:11
prion
prion
Session fixation
2020-01-02 15:15:00
veracode
veracode
Session Fixation
2020-02-24 06:03:21
cvelist
cvelist
CVE-2019-10158
2020-01-02 14:28:44
redhatcve
redhatcve
CVE-2019-10158
2019-06-06 07:20:14
cve
cve
CVE-2019-10158
2020-01-02 15:15:11
github
github
Improper implementation of the session fixation protection in Infinispan
2020-01-21 21:18:44
nvd
nvd
CVE-2019-10158
2020-01-02 15:15:11
redhat
redhat
(RHSA-2019:4037) Important: Red Hat Data Grid 7.3.2 security update
2019-12-02 16:21:52