Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2023-3628 A flaw was found in Infinispan's REST

Description

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Data Grid 8.4.4 Versions non publiées
Red Hat JBoss Enterprise Application Platform 6 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Data Grid 8.4.4

Les 3 CVE de Red Hat Data Grid 8.4.4 →
CVE-2023-5236 A flaw was found in Infinispan, which does not detect circular object references when unmarshalling 4.4 Moyenne CVE-2023-3629 A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin… 4.3 Moyenne
Suivre cette CVE