CVE-2023-3629

2023-12-1813:43:07

MITRE

web.nvd.nist.gov

infinispan

rest

cache

security

unauthorized access

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.4%

JSON

A flaw was found in Infinispan’s REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

References

access.redhat.com/errata/RHSA-2023:5396

access.redhat.com/security/cve/CVE-2023-3629

bugzilla.redhat.com/show_bug.cgi?id=2217926

security.netapp.com/advisory/ntap-20240125-0004/