CVE-2023-4586

CVE-2023-4586 is a high-severity vulnerability affecting the Hot Rod client in Infinispan and Red Hat Data Grid products. The flaw stems from the client's failure to perform hostname validation when utilizing TLS, creating a critical security gap. This oversight could enable a sophisticated man-in-the-middle (MITM) attack, allowing an attacker to intercept and potentially manipulate sensitive data with high impact on confidentiality and integrity. While the CVSS score is 7.4 (High), there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.