CVE-2018-1131 : Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurat

Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.

Published 2018-05-15 13:29:00

Updated 2019-10-09 23:38:11

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2018-1131

Redhat » Jboss Data Grid » Version: 7.2
cpe:2.3:a:redhat:jboss_data_grid:7.2:*:*:*:*:*:*:*
Matching versions
Infinispan » Infinispan » Version: 9.3.0 Update Alpha1
cpe:2.3:a:infinispan:infinispan:9.3.0:alpha1:*:*:*:*:*:*
Matching versions
Infinispan » Infinispan » Version: 9.2.2
cpe:2.3:a:infinispan:infinispan:9.2.2:*:*:*:*:*:*:*
Matching versions
Infinispan » Infinispan » Version: 8.2.10
cpe:2.3:a:infinispan:infinispan:8.2.10:*:*:*:*:*:*:*
Matching versions
Infinispan » Infinispan » Version: 9.1.7
cpe:2.3:a:infinispan:infinispan:9.1.7:*:*:*:*:*:*:*
Matching versions
Infinispan » Infinispan » Version: 9.0.3
cpe:2.3:a:infinispan:infinispan:9.0.3:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-1131

EPSS FAQ

0.27%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-1131

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-1131

CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

Assigned by: secalert@redhat.com (Secondary)
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-1131

https://access.redhat.com/errata/RHSA-2019:3892

RHSA-2019:3892 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:1833

RHSA-2018:1833 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1576492

1576492 – (CVE-2018-1131) CVE-2018-1131 infinispan: deserialization of data in XML and JSON transcoders
Issue Tracking;Third Party Advisory
http://www.securityfocus.com/bid/104218

Infinispan CVE-2018-1131 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2018-1131

Products affected by CVE-2018-1131

Exploit prediction scoring system (EPSS) score for CVE-2018-1131

CVSS scores for CVE-2018-1131

CWE ids for CVE-2018-1131

References for CVE-2018-1131