Description
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Remediation
References
Related Vulnerabilities
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1476)
Joomla! Core 1.6.0 Spam (1.6.0)
WordPress Plugin ULTIMATE VIDEO GALLERY Cross-Site Scripting (1.4)
WordPress Plugin FormBuilder Cross-Site Scripting (1.05)
WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Cross-Site Scripting (1.4)