local_analyzer vulnerabilities

2 known vulnerabilities in local_analyzer from Kiuwan. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SAST Local Analyzer: Cleartext Storage of Sensitive Information

  CVE-2023-49113Jun 20, 2024Kiuwan

  The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the K

• 7.2 High severity

  SAST: Improper Restriction of XML External Entity Reference

  CVE-2023-49110Jun 20, 2024Kiuwan

  When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud/SaaS solution), the transmitted data consists of a ZIP archive containing several files, some of them in the XML file format. During Kiuwan'