Lucene search
PRIOn knowledge basePRION:CVE-2024-23686HistoryJan 19, 2024 - 10:15 p.m.
Design/Logic Flaw
2024-01-1922:15:00
PRIOn knowledge base
www.prio-n.com
2
maven
cli
ant
debug mode
nvd api key
DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dependency-check | ge | 9.0.0 | |
| dependency-check | lt | 9.0.6 | |
| dependency-check | ge | 9.0.0 | |
| dependency-check | le | 9.0.5 | |
| dependency-check | ge | 9.0.0 | |
| dependency-check | le | 9.0.5 |
Related
cve
cve
CVE-2024-23686
2024-01-19 22:15:08
cvelist
cvelist
CVE-2024-23686 DependencyCheck Debug Mode Logging of NVD API Key
2024-01-19 21:12:13
osv
osv
CVE-2024-23686
2024-01-19 22:15:08
Insertion of Sensitive Information into Log File in OWASP DependencyCheck
2024-01-20 00:30:27
nvdApiKey is logged in debug mode
2023-12-15 23:43:30
nvd
nvd
CVE-2024-23686
2024-01-19 22:15:08
veracode
veracode
Information Exposure
2024-01-23 17:53:43
github
github
Insertion of Sensitive Information into Log File in OWASP DependencyCheck
2024-01-20 00:30:27