[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNfLCw4762wDp8nUrohndA94IgeLIsLpnZcrhvLaBnR4":3,"g5a-risk:CVE-2023-3628":138},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":54,"references":55,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":133,"notableEvents":134},"CVE-2023-3628","What is CVE-2023-3628?","A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.","A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticat...","2023-12-18T14:15:08.323","2024-09-16T14:15:11.667",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00797,[34,34,34,34,34,34,34],"Medium",[38,43,47,51],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"redhat","jboss_data_grid","-","cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"jboss_enterprise_application_platform","6","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6:*:*:*:*:*:*:*",{"vendor":39,"product":48,"version":49,"criteria":50,"vulnerable":4},"data_grid","*","cpe:2.3:a:redhat:data_grid:*:*:*:*:*:*:*:*",{"vendor":52,"product":52,"version":41,"criteria":53,"vulnerable":4},"infinispan","cpe:2.3:a:infinispan:infinispan:-:*:*:*:*:*:*:*",4,[56,61,64],{"url":57,"source":58,"tags":59},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:5396","Red Hat",[60],"Vendor Advisory",{"url":62,"source":58,"tags":63},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2023-3628",[60],{"url":65,"source":58,"tags":66},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2217924",[67],"Issue Tracking",3,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-304","Missing Critical Step in Authentication","The product implements an authentication technique, but it skips a step that weakens the technique.","Authentication techniques should follow the algorithms that define them exactly, otherwise authentication can be bypassed or more easily subjected to brute force attacks.","Draft","Base","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2023-3628? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-3628, a medium severity cyber security vulnerability from 2023. A flaw was found in Infinispan's REST. Bulk read endpoints...","CVE-2023-3628, CVE-2023-3628 vulnerability, CVE-2023-3628 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, infinispan security, jboss_data_grid vulnerability, jboss_enterprise_application_platform vulnerability, data_grid vulnerability, infinispan vulnerability","\u002Fwhat-is\u002Fcve-2023-3628",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-3628","Cybersecurity","CVE-2023-3628, CVE-2023-3628 vulnerability, CVE-2023-3628 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107,114,120,127],{"Operator":27,"Negate":27,"Nodes":108},[109],{"Operator":110,"Negate":27,"CPEMatch":111},"OR",[112],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2BF03A52-4068-47EA-8846-1E5FB708CE1A",{"Operator":27,"Negate":27,"Nodes":115},[116],{"Operator":110,"Negate":27,"CPEMatch":117},[118],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"68E89E9D-88CA-4BCC-8871-EF4AF913D871",{"Operator":27,"Negate":27,"Nodes":121},[122],{"Operator":110,"Negate":27,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":126,"VersionEndIncluding":27},"C6401304-B700-4F69-9385-66B7398C55D8","8.4.4",{"Operator":27,"Negate":27,"Nodes":128},[129],{"Operator":110,"Negate":27,"CPEMatch":130},[131],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F6718434-9048-42D0-8E70-40531CA83A16",[],[],{"lastModified":11,"cacheTime":136,"version":137},1792356305039,"2.0",{"score":139,"band":140,"action":141,"scoredAt":142},24,"Low","Monitor","2026-10-16T07:00:12.263342+00:00"]