Recherche « Red Hat Data Grid 8.6.1 »
1 CVE
Critique 0
Élevée 1
Moyenne 0
Faible 0
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Red Hat Data Grid 8.6.1 » ✕
-
CVE-2026-40975 7.5 Élevée
Spring Boot · Red Hat HawtIO HawtIO 4.4.0 · Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14 · Red Hat Data Grid 8.6.1
Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they are numeric values with a predictable range. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3.5.14), 3.4.0–3.4.15 (fix 3.4.16), 3.3.0–3.3.18 (fix 3.3.19), 2.7.0–2.7.32 (fix 2.7.33); random value property source / weak PRNG for secrets. Versions that are no longer supported are also affected per vendor advisory.