CVE-2023-49113

The Kiuwan Local Analyzer (KLA) Java scanning application contains multiple hard-coded secrets in plain text format within its JAR files. Specifically, the lib.engine/insight/optimyth-insight.jar file contains InsightServicesConfig.properties, which exposes valid GitHub credentials (insight.githu...

PT-2024-13679 · Github · Github

Name of the Vulnerable Software and Affected Versions: Kiuwan SAST: versions prior to the fixed version Kiuwan Local Analyzer KLA affected versions not specified Description: The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format,...