CVE-2025-5731CWE-209

Infinispan: credential leakage in infinispan cli

Medium · published June 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2025-06-26T21:28Z
EPSS history
Timeline
  • 26 JUN 21:28Z
    Infinispan: credential leakage in infinispan cli
    cvelistv5