Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat JBoss Enterprise Application Platform 6 — RHSA-2023:5396 Clear all filters
TI-2023-03388 CVE-2023-3629 · GHSA-r4w2-hjmr-36m7

Infinispan: non-admins should not be able to get cache config via rest api

Priority LOW 30

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00721 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304
TI-2023-03387 CVE-2023-3628 · GHSA-fhr7-8jx4-r9cp

Infispan: rest bulk ops don't check permissions

Priority LOW 30

A flaw was found in Infinispan's REST.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00797 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304