CVE-2019-10158
Fixed upstream EPSS 2%CVSS 5.4
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session integration can result in incorrect session handling.
Products: Red Hat Infinispan
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.infinispan:infinispan-core | 9.4.15.Final |