As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication
Apache Answer through version 2.0.2 logs complete application programming interface (API) keys in plaintext during each authenticated request, exposing active bearer credentials to anyone with log access. The vulnerability allows recovery and replay of these credentials. Version 2.0.3 resolves the issue.
Why it matters: Organizations running Apache Answer 2.0.2 or earlier must upgrade immediately; attackers with log file access can extract and misuse API credentials to authenticate as legitimate users.
- Source published
- First seen by Cybersecurity Tracker