A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2025:10130 | Third Party Advisory |
| https://access.redhat.com/security/cve/CVE-2025-5731 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2370429 | Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
02 Sep 2025, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Infinispan infinispan
Redhat Redhat jboss Enterprise Application Platform Infinispan Redhat data Grid Redhat jboss Enterprise Application Platform Expansion Pack |
|
| References | () https://access.redhat.com/errata/RHSA-2025:10130 - Third Party Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2025-5731 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2370429 - Issue Tracking, Third Party Advisory | |
| CPE | cpe:2.3:a:infinispan:infinispan:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_application_platform:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:data_grid:8.5.4:*:*:*:*:*:*:* |
01 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-26 22:15
Updated : 2025-09-02 18:04
NVD link : CVE-2025-5731
Mitre link : CVE-2025-5731
CVE.ORG link : CVE-2025-5731
JSON object : View
Products Affected
redhat
- jboss_enterprise_application_platform_expansion_pack
- jboss_enterprise_application_platform
- data_grid
infinispan
- infinispan
CWE
CWE-209
Generation of Error Message Containing Sensitive Information