Skip to content
Sign in
Not rated

CVE-2020-25711 A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server…

Description

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.

Affected products and versions

Product Affected versions Fixed in
Infinispan Versions not published

Other CVEs of Infinispan

The 3 CVEs of Infinispan →
CVE-2020-10771 A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side… Not rated CVE-2020-10746 A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to… Not rated
Track this CVE