Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DependencyCheck Debug Mode Logging of NVD API Key
Vulnerability Description
DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
CVSS Information
N/A
Vulnerability Type
通过日志文件的信息暴露
Vulnerability Title
DependencyCheck 日志信息泄露漏洞
Vulnerability Description
DependencyCheck是一种软件组合分析 (SCA) 工具，它尝试检测项目依赖项中包含的公开披露的漏洞。 DependencyCheck存在安全漏洞。攻击者利用该漏洞从日志文件中恢复 NVD API 密钥。以下产品及版本受到影响：DependencyCheck for Maven 9.0.0版本至9.0.6版本、CLI 9.0.0版本至9.0.5版本、Ant 9.0.0版本至9.0.5版本。
CVSS Information
N/A
Vulnerability Type
N/A