Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Red Hat Data Grid 8.4.4 — RHSA-2023:5396 Clear all filters
TI-2023-04814 CVE-2023-5236 · GHSA-488m-w9fp-5mm2

Infinispan: circular reference on marshalling leads to dos

Priority LOW 31

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01108 Published 2023-12-18 Partial fix · 4.6.2.Final CWE-1047
TI-2023-03388 CVE-2023-3629 · GHSA-r4w2-hjmr-36m7

Infinispan: non-admins should not be able to get cache config via rest api

Priority LOW 30

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00721 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304
TI-2023-03387 CVE-2023-3628 · GHSA-fhr7-8jx4-r9cp

Infispan: rest bulk ops don't check permissions

Priority LOW 30

A flaw was found in Infinispan's REST.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00797 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304