CVE-2020-10746CWE-862

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs

published October 19, 2020

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2020-10-19T20:42Z
EPSS history
Timeline
  • 19 OCT 20:42Z
    A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs
    cvelistv5