CVE-2023-5384

Katalog CVE

CVSS 2.7 · Low EPSS 0,54%

Kerentanan Cleartext Storage of Sensitive Information pada redhat data grid, redhat jboss data grid +1 lainnya. Skor CVSS 3.1 2.7 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in Infinispan. When serializing the configuration for a cache to XML/JSON/YAML, which contains credentials (JDBC store with connection pooling, remote store), the credentials are returned in clear text as part of the configuration.

Rincian

Terbit di NVD

18 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,54% peluang dieksploitasi; lebih tinggi dari 44,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:7676 advisory vendor
• https://access.redhat.com/security/cve/CVE-2023-5384 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2242156 issue tracking
• https://security.netapp.com/advisory/ntap-20240125-0004/