Medium severity4.3NVD Advisory· Published Dec 18, 2023· Updated Jun 17, 2026
CVE-2023-3629
CVE-2023-3629
Description
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.infinispan:infinispan-server-restMaven | >= 15.0.0.Dev01, < 15.0.0.Dev04 | 15.0.0.Dev04 |
org.infinispan:infinispan-server-restMaven | < 14.0.18.Final | 14.0.18.Final |
Affected products
19- osv-coords13 versionspkg:apk/chainguard/infinispan-15.0pkg:apk/chainguard/infinispan-15.0-compatpkg:apk/chainguard/infinispan-15.0-imagespkg:apk/chainguard/infinispan-15.1pkg:apk/chainguard/infinispan-15.1-compatpkg:apk/chainguard/infinispan-15.1-imagespkg:apk/chainguard/infinispan-15.2pkg:apk/chainguard/infinispan-15.2-compatpkg:apk/chainguard/infinispan-15.2-imagespkg:apk/wolfi/infinispan-15.2pkg:apk/wolfi/infinispan-15.2-compatpkg:apk/wolfi/infinispan-15.2-imagespkg:maven/org.infinispan/infinispan-server-rest
< 15.0.21-r1+ 12 more
- (no CPE)range: < 15.0.21-r1
- (no CPE)range: < 15.0.21-r1
- (no CPE)range: < 15.0.21-r1
- (no CPE)range: < 15.1.7-r3
- (no CPE)range: < 15.1.7-r3
- (no CPE)range: < 15.1.7-r3
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: < 15.2.6-r1
- (no CPE)range: >= 15.0.0.Dev01, < 15.0.0.Dev04
- Red Hat/Red Hat Data Grid 8.4.4v5cpe:/a:redhat:jboss_data_grid:8
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:6:*:*:*:*:*:*:*
- cpe:/a:redhat:jboss_enterprise_application_platform:6
- cpe:2.3:a:infinispan:infinispan:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- access.redhat.com/errata/RHSA-2023:5396nvdVendor AdvisoryWEB
- access.redhat.com/security/cve/CVE-2023-3629nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-r4w2-hjmr-36m7ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-3629ghsaADVISORY
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingWEB
- github.com/infinispan/infinispan/commit/11b3cb0f7ba68b73dd32f655ff3f3df842a0c6bdghsaWEB
- github.com/infinispan/infinispan/commit/1e3cc542336d2f49743ab8176ed6f1175e034c59ghsaWEB
- security.netapp.com/advisory/ntap-20240125-0004ghsaWEB
- security.netapp.com/advisory/ntap-20240125-0004/nvd
News mentions
0No linked articles in our index yet.