Description
Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Terracotta | 10.15.0 – ≤ 10.15.0 IF23, 11.1.0 – ≤ 11.1.0 IF5 | — |
References
- https://www.ibm.com/support/pages/node/7247977 vendor-advisory patch