CVE-2025-0736CWE-532

Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

Medium · published January 28, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-01-28T09:12Z
EPSS history
Timeline
  • 28 JAN 09:12Z
    Org.infinispan-infinispan-parent: exposure of sensitive information in application logs
    cvelistv5