6.5
CVSSv3

CVE-2023-3629

Published: 18/12/2023 Updated: 25/01/2024
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat data grid

redhat jboss data grid -

redhat jboss enterprise application platform 6

infinispan infinispan -

Vendor Advisories

Synopsis Moderate: Red Hat Data Grid 844 security update Type/Severity Security Advisory: Moderate Topic An update for Red Hat Data Grid 8 is now availableRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, i ...
Description<!---->A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation This issue could allow an authenticated user to access information outside of their intended permissionsA flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evalu ...