Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2023/12/28 6:30 p.m.•34 views

Infinispan caches credentials in clear text

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration...

7.2CVSS6.7AI score0.00543EPSS
SaveExploits0References11Affected Software8
Cvelist
Cvelist
•added 2023/12/18 1:43 p.m.•61 views

CVE-2023-5384 Infinispan: credentials returned from configuration as clear text

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration...

7.2CVSS7.1AI score0.00543EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•2 views

CVE-2023-5384: Cleartext Storage of Sensitive Information

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration...

7.2CVSS6AI score0.00543EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/12/06 4:57 a.m.•51 views

CVE-2023-5384

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials JDBC store with connection pooling, remote store, the credentials are returned in clear text as part of the configuration. Mitigation The issue's impact is limited because...

7.2CVSS5.1AI score0.00543EPSS
SaveExploits0References3
Rows per page
Query Builder