Lucene search
RedhatCVELIST:CVE-2020-10746HistoryOct 19, 2020 - 8:42 p.m.
CVE-2020-10746
2020-10-1920:42:17
CWE-862
redhat
www.cve.org
7
infinispan
local access
rest
hotrod
unauthorized operations
caches
A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server.
CNA Affected
[
{
"product": "Infinispan",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Infinispan 11.0.0"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2020-10-19 21:15:00
cve
cve
CVE-2020-10746
2020-10-19 21:15:12
redhatcve
redhatcve
CVE-2020-10746
2020-10-19 13:18:43
nvd
nvd
CVE-2020-10746
2020-10-19 21:15:12
redhat
redhat
(RHSA-2020:3626) Moderate: Red Hat Data Grid 8.1.0 Security Update
2020-09-03 16:46:15