GHSA-cqm8-rg2p-jfcf
Infinispan CLI vulnerable to Generation of Error Message Containing Sensitive Information
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.infinispan:infinispan-cli-client | <= 16.0.0.Dev01 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.
References
External links from the advisory. They lead to third-party sites.