Lucene search
Veracode Vulnerability DatabaseVERACODE:7120HistoryJul 20, 2018 - 10:58 a.m.
Remote Code Execution (RCE)
2018-07-2010:58:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.016
Percentile
87.6%
ignite-core is vulnerable to remote code execution (RCE) attacks. The library does not restrict the types of classes that can be serialized or deserialized, allowing a malicious user to pass a serialized class to the GridClientJdkMarshaller endpoint to inject and execute arbitrary code.
Related
redhatcve
redhatcve
CVE-2018-8018
2019-10-08 23:16:05
cvelist
cvelist
CVE-2018-8018
2018-07-19 18:00:00
cve
cve
CVE-2018-8018
2018-07-20 01:29:04
prion
prion
Deserialization of untrusted data
2018-07-20 01:29:00
osv
osv
Code execution via deserialization in org.apache.ignite:ignite-core
2018-10-16 20:53:54
nvd
nvd
CVE-2018-8018
2018-07-20 01:29:04
github
github
Code execution via deserialization in org.apache.ignite:ignite-core
2018-10-16 20:53:54
redhat
redhat
(RHSA-2018:3768) Important: Red Hat Fuse 7.2 security update
2018-12-04 15:58:22