Description
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-1999-0450)
WordPress Plugin Feature Slideshow 'src' Parameter Cross-Site Scripting (1.0.6beta)
WordPress Plugin WP-Paginate Cross-Site Scripting (1.2.1)
WordPress Plugin Export any WordPress data to XML/CSV Cross-Site Scripting (1.3.0)
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)