Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions
Moderate severity
GitHub Reviewed
Published
Dec 30, 2023
to the GitHub Advisory Database
•
Updated Sep 16, 2024
Package
Affected versions
>= 15.0.0.Dev01, < 15.0.0.Dev04
< 14.0.18.Final
Patched versions
15.0.0.Dev04
14.0.18.Final
Description
Published by the National Vulnerability Database
Dec 18, 2023
Published to the GitHub Advisory Database
Dec 30, 2023
Reviewed
Sep 16, 2024
Last updated
Sep 16, 2024
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
References