CVE-2021-31917

CVE-2021-31917

Vendor N/A
Product Red Hat DataGrid and Infinispan
Weakness CWE-287 · Improper authentication
Published September 21, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Key dates

02Disclosure timeline

September 21, 2021 CVE published
August 3, 2024 Record updated