7.2
High
CVE-2023-5384 A flaw was found in Infinispan
Description
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Data Grid 8.4.6 | Versions not published |
References
- RHSA-2023:7676 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2242156 bugzilla.redhat.com
Timeline
- Published
- Last modified