{"action":"Upgrade org.infinispan:infinispan-server-rest to 14.0.18.Final (14.x) or 15.0.0.Dev04 (15.x) or later.","affected":[{"fixed":"15.0.0.Dev04","introduced":"15.0.0.Dev01"},{"fixed":"14.0.18.Final","introduced":"0"}],"component":"org.infinispan:infinispan-server-rest","cve_ids":["CVE-2023-3629"],"ecosystem":"Maven","epss":0.00721,"exploited":false,"fixed_versions":["15.0.0.Dev04","14.0.18.Final"],"ghsa_id":"GHSA-r4w2-hjmr-36m7","id":"tcs_01M5N9AYAQEDKCKRY2T8NS6F13","modified_at":"2026-09-10T03:50:04.687866980Z","published_at":"2023-12-30T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-r4w2-hjmr-36m7","https://nvd.nist.gov/vuln/detail/CVE-2023-3629","https://github.com/infinispan/infinispan/commit/11b3cb0f7ba68b73dd32f655ff3f3df842a0c6bd","https://github.com/infinispan/infinispan/commit/1e3cc542336d2f49743ab8176ed6f1175e034c59","https://access.redhat.com/errata/RHSA-2023:5396","https://access.redhat.com/security/cve/CVE-2023-3629","https://bugzilla.redhat.com/show_bug.cgi?id=2217926","https://github.com/infinispan/infinispan","https://security.netapp.com/advisory/ntap-20240125-0004"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r4w2-hjmr-36m7","url":"https://osv.dev/vulnerability/GHSA-r4w2-hjmr-36m7"}],"summary":"Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions"}