Paging is broken in the Security domains administration page

When logged in as admin, going to Control Panel > Permissions, a list of security domains shows with paging possibilities.

First page says "Showing 1 to 20 of 48" and shows 20 domains.
Second page says "Showing 21 to 40 of 48" and shows no domains.
Third page does not appear: instead there is a stack trace in log (see below).

org.hippoecm.frontend.plugins.cms.admin.domains.DomainDataProvider seems to be not handling paging correctly.

[INFO] [talledLocalContainer] Caused by: java.lang.IllegalArgumentException: fromIndex(40) > toIndex(8)
[INFO] [talledLocalContainer] at java.util.SubList.<init>(AbstractList.java:604)
[INFO] [talledLocalContainer] at java.util.RandomAccessSubList.<init>(AbstractList.java:758)
[INFO] [talledLocalContainer] at java.util.AbstractList.subList(AbstractList.java:468)
[INFO] [talledLocalContainer] at org.hippoecm.frontend.plugins.cms.admin.domains.DomainDataProvider.iterator(DomainDa
aProvider.java:70)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.data.DataViewBase$ModelIterator.<init>(DataViewBas
.java:109)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.data.DataViewBase.getItemModels(DataViewBase.java:
6)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.AbstractPageableView.getItemModels(AbstractPageabl
View.java:107)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.RefreshingView.onPopulate(RefreshingView.java:94)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.AbstractRepeater.onBeforeRender(AbstractRepeater.j
va:131)
[INFO] [talledLocalContainer] at org.apache.wicket.markup.repeater.AbstractPageableView.onBeforeRender(AbstractPageab
eView.java:121)
[INFO] [talledLocalContainer] at org.apache.wicket.Component.internalBeforeRender(Component.java:1069)
[INFO] [talledLocalContainer] at org.apache.wicket.Component.beforeRender(Component.java:1103)
[INFO] [talledLocalContainer] at org.apache.wicket.MarkupContainer.onBeforeRenderChildren(MarkupContainer.java:1777)
[INFO] [talledLocalContainer] ... 38 more