Aller au contenu
Se connecter
Non notée

CVE-2020-25711 A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server…

Description

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.

Produits et versions touchés

Produit Versions touchées Corrigé en
Infinispan Versions non publiées

Autres CVE de Infinispan

Les 3 CVE de Infinispan →
CVE-2020-10771 A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side… Non notée CVE-2020-10746 A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to… Non notée
Suivre cette CVE