CVE-2019-10158 MEDIUM

CVE-2019-10158

Vendor Red Hat

Product infinispan

Weakness CWE-384 · Session fixation

Published January 2, 2020

Last update February 13, 2025

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.

Key dates

02Disclosure timeline

January 2, 2020 CVE published

February 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-10158 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/384.html