Lucene search
ApacheVULNRICHMENT:CVE-2023-44483HistoryOct 20, 2023 - 9:23 a.m.
CVE-2023-44483 Apache Santuario: Private Key disclosure in debug-log output
2023-10-2009:23:53
CWE-532
apache
github.com
2
apache santuario
xml security
java
private key
disclosure
debug-log
vulnerable
upgrade
All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.
Related
osv
osv
Apache Santuario - XML Security for Java are vulnerable to private key disclosure
2023-10-20 12:31:04
CGA-9f93-54g3-h45w
2024-06-06 12:25:26
CGA-mcc2-jcp7-fh6p
2024-06-06 12:26:10
github
github
prion
prion
Code injection
2023-10-20 10:15:00
debiancve
debiancve
CVE-2023-44483
2023-10-20 10:15:12
ubuntucve
ubuntucve
CVE-2023-44483
2023-10-20 00:00:00
redhatcve
redhatcve
CVE-2023-44483
2023-10-27 12:29:31
ibm
ibm
Security Bulletin: IBM Match 360 is vulnerable to Apache Santuario used within IBM WebSphere Application Server Liberty (CVE-2023-44483)
2024-02-16 13:31:48
nvd
nvd
CVE-2023-44483
2023-10-20 10:15:12
cvelist
cvelist
CVE-2023-44483 Apache Santuario: Private Key disclosure in debug-log output
2023-10-20 09:23:53
cgr
cgr
CVE-2023-44483 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Information Disclosure
2023-10-25 08:59:16
cve
cve
CVE-2023-44483
2023-10-20 10:15:12
wolfi
wolfi
CVE-2023-44483 vulnerabilities
2024-09-18 21:11:55
nessus
nessus
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
AI Score
6.7
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-44483