8 matches found
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-92171 Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-92171
A flaw in the Infinispan Operator for Red Hat Data Grid allows for sensitive information disclosure when cross-site (xsite) TLS is enabled. The operator launches the Gossip Router container using keystore and truststore passwords as plain-text command-line arguments (-tls_keystore_password, -tls_...
EUVD-2026-109942
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
PT-2026-123368
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tls keystore password, -tls truststore password. Container...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: op-geth, emissary, kubevela, rancher-telemetry, etcd, cloudflared, juicefs-csi-driver, aws-node-termination-handler, kubernetes, amazon-cloudwatch-agent, verticadb-operator, jitsucom-bulker, infinispan-operator, opentelemetry-collector-contrib, guac, redis-operator...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: k8ssandra-operator, runc, minio-operator, crossplane-provider-azure-sql, helm, grpcurl, argo-workflows, etcd, kubernetes-replicator, kuberlr, nri-apache, caddy, direnv, cri-tools, aactl, opensearch-k8s-operator, metrics-agent, jitsucom-bulker, git-sync,...