CVE-2024-23686

CVE-2024-23686: DependencyCheck Debug Mode Logging of NVD API Key

Weakness CWE-532 · Sensitive info in logs

Published January 19, 2024

Last update November 29, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

Key dates

02Disclosure timeline

January 19, 2024 CVE published

November 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-23686 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2023-22869 IBM Aspera Faspex information disclosure CVE-2025-1296 Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs CVE-2022-41553 Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer CVE-2024-30511 WordPress FG PrestaShop to WooCommerce plugin <= 4.45.1 - Sensitive Data Exposure via Log File vulnerability CVE-2026-20239 Sensitive Information Disclosure through Log Files in Splunk Enterprise