mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-07 13:36:56 +00:00
63 lines
1.7 KiB
JSON
63 lines
1.7 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2023-3628",
|
||
|
|
"sourceIdentifier": "secalert@redhat.com",
|
||
|
|
"published": "2023-12-18T14:15:08.323",
|
||
|
|
"lastModified": "2023-12-18T15:04:28.363",
|
||
|
|
"vulnStatus": "Awaiting Analysis",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV31": [
|
||
|
|
{
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"type": "Secondary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.1",
|
||
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||
|
|
"attackVector": "NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "LOW",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "HIGH",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "NONE",
|
||
|
|
"baseScore": 6.5,
|
||
|
|
"baseSeverity": "MEDIUM"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 2.8,
|
||
|
|
"impactScore": 3.6
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "secalert@redhat.com",
|
||
|
|
"type": "Secondary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-304"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "https://access.redhat.com/errata/RHSA-2023:5396",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://access.redhat.com/security/cve/CVE-2023-3628",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2217924",
|
||
|
|
"source": "secalert@redhat.com"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|