{"action":"Upgrade org.infinispan:infinispan-core to 14.0.25.Final (14.x) or 15.0.0.Dev07 (15.x) or later.","affected":[{"fixed":"15.0.0.Dev07","introduced":"15.0.0.Dev01"},{"fixed":"14.0.25.Final","introduced":"0"}],"component":"org.infinispan:infinispan-core","cve_ids":["CVE-2023-5384"],"ecosystem":"Maven","epss":0.00543,"exploited":false,"fixed_versions":["15.0.0.Dev07","14.0.25.Final"],"ghsa_id":"GHSA-gg57-587f-h5v6","id":"tcs_01M5N8Y6A96YFTFXTKGTF4MPAA","modified_at":"2026-09-10T03:50:05.224705965Z","published_at":"2023-12-28T18:30:32Z","references":["https://osv.dev/vulnerability/GHSA-gg57-587f-h5v6","https://nvd.nist.gov/vuln/detail/CVE-2023-5384","https://github.com/infinispan/infinispan/pull/11555","https://github.com/infinispan/infinispan/pull/11995","https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47","https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61","https://access.redhat.com/errata/RHSA-2023:7676","https://access.redhat.com/security/cve/CVE-2023-5384","https://bugzilla.redhat.com/show_bug.cgi?id=2242156","https://github.com/infinispan/infinispan","https://issues.redhat.com/browse/ISPN-15202","https://security.netapp.com/advisory/ntap-20240125-0004"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-gg57-587f-h5v6","url":"https://osv.dev/vulnerability/GHSA-gg57-587f-h5v6"}],"summary":"Infinispan caches credentials in clear text"}