Infinispan permits local access to controls via both REST and HotRod APIs. A user authed to the local machine could perform all operations on the caches, including creation, update, deletion, and shutdown of the entire server.
*** Bug 1835916 has been marked as a duplicate of this bug. ***
Acknowledgments: Name: Diego Lovison (Red Hat)
*** Bug 1835920 has been marked as a duplicate of this bug. ***