[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS_hs33H4EJGbnqHehvBCs8j0rJMPaRazh1AqqEbQnYo":3,"g5a-risk:CVE-2017-2638":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":15,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":55,"references":56,"referencesCount":80,"weaknesses":81,"weaknessesCount":55,"isActivelyExploited":95,"cisaInfo":15,"otxData":15,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":137,"notableEvents":138},"CVE-2017-2638","What is CVE-2017-2638?","It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name.","It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read...","2018-07-16T13:29:00.223","2019-10-09T23:27:00.257",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":33,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",3.9,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[34],{"Source":18,"Type":19,"CVSSData":35,"BaseSeverity":26,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":36,"VectorString":37,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":24,"BaseScore":39,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,10,4.9,0.01559,[42,42,42,42,42,42,42],"Medium",[46,50],{"vendor":47,"product":47,"version":48,"criteria":49,"vulnerable":4},"infinispan","*","cpe:2.3:a:infinispan:infinispan:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"redhat","jboss_data_grid","7.1","cpe:2.3:a:redhat:jboss_data_grid:7.1:*:*:*:*:*:*:*",2,[57,62,67,72,76],{"url":58,"source":59,"tags":60},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-1097.html","Red Hat",[61],"Third Party Advisory",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97964","Securityfocus",[61,66],"VDB Entry",{"url":68,"source":59,"tags":69},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-2638",[70,71,61],"Issue Tracking","Patch",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fgithub.com\u002Finfinispan\u002Finfinispan\u002Fpull\u002F4936\u002Fcommits","GitHub",[71,61],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fissues.jboss.org\u002Fbrowse\u002FISPN-7485","Jboss",[61],5,[82,90],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":91,"name":92,"description":93,"extendedDescription":86,"status":87,"abstraction":94,"structure":89},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Base",false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2017-2638? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2638, a medium severity cyber security vulnerability from 2018. It was found that the REST API in Infinispan before versio...","CVE-2017-2638, CVE-2017-2638 vulnerability, CVE-2017-2638 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, infinispan security, redhat security, infinispan vulnerability, jboss_data_grid vulnerability","\u002Fwhat-is\u002Fcve-2017-2638",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2638","Cybersecurity","CVE-2017-2638, CVE-2017-2638 vulnerability, CVE-2017-2638 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123,131],{"Operator":15,"Negate":15,"Nodes":124},[125],{"Operator":126,"Negate":15,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":129,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":130,"VersionEndIncluding":15},"4A8499D5-3044-41F2-91D8-5B97521FD35A","9.0.0",{"Operator":15,"Negate":15,"Nodes":132},[133],{"Operator":126,"Negate":15,"CPEMatch":134},[135],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E8912FC8-FAC1-4503-85F7-3231675450FE",[],[],{"lastModified":11,"cacheTime":140,"version":36},1792264462879,{"score":142,"band":143,"action":144,"scoredAt":145},32,"Low","Monitor","2026-10-16T06:44:31.157477+00:00"]