CVE-2017-2638

The CVE-2017-2638 issue affects Infinispan where the REST API did not properly enforce authentication constraints, enabling an attacker to read or modify data in the default cache or a known cache name. Affected product scope is Infinispan before version 9.0.0. The root cause, as described across...

Moderate: Red Hat Security Advisory: Red Hat JBoss Data Grid 7.1

Red Hat JBoss Data Grid 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-2638

It was found that the REST API in infinispan did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name...