VULNERABILITY INTELLIGENCE

CVE-2024-23686

CVSS score5.3 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2024-01-19
Last modified2026-07-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

Weakness classification

  • disclosure@vulncheck.com: CWE-532
  • nvd@nist.gov: CWE-532

Primary references