{"action":"Upgrade org.infinispan:infinispan-server-core to 9.0.0 or later.","affected":[{"fixed":"9.0.0","introduced":"0"}],"component":"org.infinispan:infinispan-server-core","cve_ids":["CVE-2017-2638"],"ecosystem":"Maven","epss":0.01559,"exploited":false,"fixed_versions":["9.0.0"],"ghsa_id":"GHSA-mvxp-3j62-jqr6","id":"tcs_01M5N95W5GRCSTW18T3VVZ4ZD1","modified_at":"2024-02-16T08:25:10.017062Z","published_at":"2022-05-13T01:36:52Z","references":["https://osv.dev/vulnerability/GHSA-mvxp-3j62-jqr6","https://nvd.nist.gov/vuln/detail/CVE-2017-2638","https://github.com/infinispan/infinispan/pull/4936","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2638","https://issues.jboss.org/browse/ISPN-7485","http://rhn.redhat.com/errata/RHSA-2017-1097.html","http://www.securityfocus.com/bid/97964"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mvxp-3j62-jqr6","url":"https://osv.dev/vulnerability/GHSA-mvxp-3j62-jqr6"}],"summary":"Infinispan Rest API Does Not Enforce Auth Constraints"}