Infinispan caches credentials in clear text

🗓️ 28 Dec 2023 18:30:32Reported by GitHub Advisory DatabaseType

Infinispan caches credentials in clear tex

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for Oct 2024 - Multiple CVEs addressed	12 Dec 202414:16	–	ibm
Chainguard	CVE-2023-5384 vulnerabilities	7 Jan 202601:29	–	cgr
Circl	CVE-2023-5384	24 Dec 202318:22	–	circl
CNNVD	Red Hat Infinispan Security Vulnerability	6 Dec 202300:00	–	cnnvd
CVE	CVE-2023-5384	18 Dec 202313:43	–	cve
Cvelist	CVE-2023-5384 Infinispan: credentials returned from configuration as clear text	18 Dec 202313:43	–	cvelist
EUVD	EUVD-2023-3210	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5384	18 Dec 202314:15	–	nvd
OSV	CGA-9MF3-C628-G9CX	29 Jan 202600:45	–	osv
OSV	CVE-2023-5384	18 Dec 202314:15	–	osv

Vulners

Node

org.infinispan infinispan-hotrodRange15.0.0.Dev01–15.0.0.Dev07maven

org.infinispan infinispan-commonsRange15.0.0.Dev01–15.0.0.Dev07maven

org.infinispan infinispan-coreRange15.0.0.Dev01–15.0.0.Dev07maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-5384
access	www.access.redhat.com/errata/RHSA-2023:7676
access	www.access.redhat.com/security/cve/CVE-2023-5384
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20240125-0004
github	www.github.com/infinispan/infinispan/pull/11555
github	www.github.com/infinispan/infinispan/pull/11995
github	www.github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
github	www.github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
issues	www.issues.redhat.com/browse/ISPN-15202

18 Nov 2024 16:26Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.12.7 - 7.2

EPSS0.00545

SSVC