Skip to content
fr Sign in
6.5 Medium

CVE-2023-3628 A flaw was found in Infinispan's REST

Description

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Affected products and versions

Product Affected versions Fixed in
Red Hat Data Grid 8.4.4 Versions not published
Red Hat JBoss Enterprise Application Platform 6 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Data Grid 8.4.4

The 3 CVEs of Red Hat Data Grid 8.4.4 →
CVE-2023-5236 A flaw was found in Infinispan, which does not detect circular object references when unmarshalling 4.4 Medium CVE-2023-3629 A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin… 4.3 Medium
Track this CVE