Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-0736

Опубликовано: 27 янв. 2025
Источник: redhat
CVSS3: 5.5

Описание

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-532
https://bugzilla.redhat.com/show_bug.cgi?id=2342233org.infinispan-infinispan-parent: Exposure of Sensitive Information in Application Logs

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
10 месяцев назад

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

CVSS3: 5.5
github
10 месяцев назад

Infinispan vulnerable to Insertion of Sensitive Information into Log File

CVSS3: 5.5
fstec
10 месяцев назад

Уязвимость конфигурации JDBC_PING программного обеспечения для хранения данных Infinispan, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к защищаемой информации

5.5 Medium

CVSS3