📦

infinispan-server-runtime

Vendor: infinispan

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 0.24% Exploit Prob.
Latest CVE CVE-2020-10746 Oct 19

Security Vulnerability Index

Page 1 / 1
6.1 CVSS
CVE-2020-10746

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server.

EPSS: 0.24%