Description
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Observable Timing Discrepancy Vulnerability (CVE-2026-33006)
Moodle Improper Authentication Vulnerability (CVE-2022-0985)
WordPress Plugin Qiniu Cloudtuchuang Cross-Site Scripting (1.8)
MySQL CVE-2018-2600 Vulnerability (CVE-2018-2600)
WordPress Plugin YITH WooCommerce Best Sellers Security Bypass (1.1.11)