Infinispan REST API Vulnerability Allows Unauthorized Data Access

CVE-2017-2638

What is CVE-2017-2638?

The Infinispan REST API before version 9.0.0 is susceptible to an authorization bypass vulnerability. This flaw allows attackers to improperly access and manipulate data within both the default cache and any known cache names, leading to potential data breaches and confidentiality concerns. Proper authentication controls were not enforced, which increases the risk of exploitation in environments where sensitive data is stored.

References