CVE Vulnerabilities

CVE-2023-3628

Published: Dec 18, 2023 | Modified: Jan 25, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A flaw was found in Infinispans REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Affected Software

Name Vendor Start Version End Version
Jboss_data_grid Redhat - (including) - (including)

References