Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
Weakness
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Terracotta | Ibm | 10.15.0 (including) | 10.15.0.23 (excluding) |
| Terracotta | Ibm | 11.1.0 (including) | 11.1.0.5 (excluding) |