PT-2026-117310
CVE-2026-64943
·
Published
2026-10-19
·
Updated
2026-10-19
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Apache Answer versions prior to 2.0.3
Description
Full API keys are written to application logs during every authenticated request. This allows individuals with access to the logs to recover and replay active bearer credentials, which are tokens used to authenticate a user's identity for a specific session.
Recommendations
Upgrade to version 2.0.3.
Found an issue in the description? Have something to add? Feel free to write us 👾