CVE-2021-31917

Description

A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.431

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-31917,CVE-2023-4586,CVE-2024-7885 are affected in Red Hat Data Grid 8 8.0.0	Windows
Vulnerabilities CVE-2021-31917 are affected in Red Hat Data Grid 8 8.0.1	Windows
Vulnerabilities CVE-2021-31917 are affected in Red Hat Data Grid 8 8.1.0	Windows
Vulnerabilities CVE-2021-31917 are affected in Red Hat Data Grid 8 8.1.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234