Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22317
HistoryJan 17, 2020 - 6:19 a.m.

Information Disclosure

2020-01-1706:19:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

61.6%

An attacker is able to obtain the private keys from a JWK keystore file by setting the configuration parameter rs.security.keystore.type to jwk.

References

0.002 Low

EPSS

Percentile

61.6%