CVE-2025-5731
Medium
Description
A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Redhat Data Grid
PublishedJun 26, 2025
First seenJun 26, 2025
Weakness typeCWE-209CWE-209
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat data_grid | 8.5.4 | — |
| redhat jboss_enterprise_application_platform | 7.0.0, 8.0.0 | — |
| redhat jboss_enterprise_application_platform_expansion_pack | No range specified | — |
| infinispan infinispan | No range specified | — |
| org.infinispan:infinispan-cli-clientMaven | v ≤ 16.0.0.Dev01 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.