March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Multiple Kubernetes Vulnerabilities Exploited
October 22, 2023
Rewterz Threat Advisory – Multiple VMware Products Vulnerabilities
October 22, 2023
Rewterz Threat Advisory – Multiple Kubernetes Vulnerabilities Exploited
October 22, 2023
Rewterz Threat Advisory – Multiple VMware Products Vulnerabilities
October 22, 2023
Severity
Medium
Analysis Summary
CVE-2023-44483
Apache Santuario could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of a private key in the log files when using the JSR 105 API. By gaining access to the log files, an attacker could exploit this vulnerability to obtain the private key information, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2023-44483
Affected Vendors
Apache
Affected Products
- Apache Santuario 2.2.5
- Apache Santuario 2.3.3
- Apache Santuario 3.0.2
Remediation
Upgrade to the latest version of Santuario available from the Apache Web site.