Vulnetix
Try Vulnetix Request Demo
CVE-2020-25711 PUBLISHED CVSS 4.900000095367432 MEDIUM

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.

EPSS 0.18% · 39.8th percentile

Risk Scores

CVSS v2.0
4.900000095367432
EPSS Score
0.18%
39.8th percentile

Affected Products

VendorProductVersions
infinispaninfinispan0
n/ainfinispanInfinispan 11.0.6 Final
Mavenorg.infinispan:infinispan-core0
netappactive_iq_unified_manager
redhatdata_grid8.0

Timeline

References

Open in Interactive Console →