Sensitive Data Exposure

Infinispan CLI is vulnerable to sensitive data exposure. The vulnerability is due to processing a Base64-decoded Kubernetes secret password in plaintext and including it in a command string, which may expose the data in error messages when a command is not found, allowing attackers to exploit thi...

Infinispan CLI vulnerable to Generation of Error Message Containing Sensitive Information

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

org.infinispan:infinispan-server-runtime (12.0.0.dev3), org.infinispan:infinispan-server-testdriver-core (12.0.0.dev3) +4 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (12.0.0.dev3)

org.infinispan:infinispan-cli-client MAVEN version 12.0.0.dev3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 12.0.0.dev3 -...

org.infinispan:infinispan-quarkus-cli (15.1.4.final), org.infinispan:infinispan-server-integration (15.1.4.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.4.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.4.final -...

org.infinispan:infinispan-docs (15.2.1.final), org.infinispan:infinispan-quarkus-cli (15.2.1.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.1.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.1.final -...

org.infinispan:infinispan-docs (15.2.0.dev01), org.infinispan:infinispan-quarkus-cli (15.2.0.dev01) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.0.dev01)

org.infinispan:infinispan-cli-client MAVEN version 15.2.0.dev01 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.0.dev01 -...

org.infinispan:infinispan-docs (15.2.0.final), org.infinispan:infinispan-quarkus-cli (15.2.0.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.0.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.0.final -...

org.infinispan:infinispan-docs (15.1.6.final), org.infinispan:infinispan-quarkus-cli (15.1.6.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.6.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.1.6.final -...

org.infinispan:infinispan-quarkus-cli (15.1.5.final), org.infinispan:infinispan-server-integration (15.1.5.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.5.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.5.final -...

org.infinispan:infinispan-server-runtime (11.0.7.final), org.infinispan:infinispan-server-testdriver-core (11.0.7.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.7.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.7.final -...

org.infinispan:infinispan-server-runtime (11.0.3.final), org.infinispan:infinispan-server-testdriver-core (11.0.3.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.3.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.3.final -...

org.infinispan:infinispan-server-runtime (11.0.4.final), org.infinispan:infinispan-server-testdriver-core (11.0.4.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.4.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.4.final -...

org.infinispan:infinispan-server-runtime (11.0.5.final), org.infinispan:infinispan-server-testdriver-core (11.0.5.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.5.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.5.final -...

org.infinispan:infinispan-docs (>=16.0.0, <=16.0.0.dev01), org.infinispan:infinispan-quarkus-cli (>=16.0.0, <=16.0.0.dev01) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (>=16.0.0, <=16.0.0.dev01)

org.infinispan:infinispan-cli-client MAVEN version =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0, =16.0.0.dev01 Source cves: CVE-2025-5731 Source advisory: GHSA-CQM8-RG2P-JFCF...

org.infinispan:infinispan-docs (15.2.6.final), org.infinispan:infinispan-quarkus-cli (15.2.6.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.6.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.6.final -...

org.infinispan:infinispan-docs (15.2.5.final), org.infinispan:infinispan-quarkus-cli (15.2.5.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.5.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.5.final -...

org.infinispan:infinispan-docs (15.2.4.final), org.infinispan:infinispan-quarkus-cli (15.2.4.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.4.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.4.final -...

org.infinispan:infinispan-server-runtime (11.0.17.final), org.infinispan:infinispan-server-testdriver-core (11.0.17.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.17.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.17.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.17.final -...

org.infinispan:infinispan-quarkus-cli (15.0.7.final), org.infinispan:infinispan-server-integration (15.0.7.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.7.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.7.final -...

org.infinispan:infinispan-quarkus-cli (15.0.6.final), org.infinispan:infinispan-server-integration (15.0.6.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.6.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.6.final -...