PT-2023-6589
CVE-2023-44483
·
تاريخ النشر
2023-10-19
·
تاريخ التحديث
2025-10-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apache Santuario - XML Security for Java versions prior to 2.2.6
Apache Santuario - XML Security for Java versions prior to 2.3.4
Apache Santuario - XML Security for Java versions prior to 3.0.3
Description
The issue is related to the disclosure of information through log files. When using the JSR 105 API and generating an XML Signature with debug level logging enabled, a private key may be disclosed in log files.
Recommendations
Upgrade to version 2.2.6, which fixes this issue.
Upgrade to version 2.3.4, which fixes this issue.
Upgrade to version 3.0.3, which fixes this issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾