CVE-2023-5384 — Infinispan: credentials returned from configuration as clear text
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), t…
Published: 2023-12-18 · CVSS: 7.2 · CVSS 3.1
A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7