Skip to content
Sign in
Not rated

CVE-2020-10746 A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to…

Description

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server.

Affected products and versions

Product Affected versions Fixed in
Infinispan Versions not published

Other CVEs of Infinispan

The 3 CVEs of Infinispan →
CVE-2020-10771 A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side… Not rated CVE-2020-25711 A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server… Not rated
Track this CVE