PT-2018-18383 · Apache · Apache Ignite
Publicado
2018-07-19
·
Atualizado
2019-02-28
·
CVE-2018-8018
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Apache Ignite versions prior to 2.4.8
Apache Ignite versions 2.5.x prior to 2.5.3
Description:
The serialization mechanism in Apache Ignite does not have a list of classes allowed for serialization/deserialization. This allows for the execution of arbitrary code when third-party vulnerable classes are present in the Ignite classpath. The issue can be exploited by sending a specially prepared serialized object to the GridClientJdkMarshaller deserialization endpoint.
Recommendations:
For Apache Ignite versions prior to 2.4.8, update to version 2.4.8 or later.
For Apache Ignite versions 2.5.x prior to 2.5.3, update to version 2.5.3 or later.
As a temporary workaround, consider restricting access to the GridClientJdkMarshaller deserialization endpoint to minimize the risk of exploitation.
Correção
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Ignite