Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-5384

Infinispan: credentials returned from configuration as clear text

Description

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Data Grid 8.4.6

Default version status: unaffected

References