CLEANSTART-2026-DP56505: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA
Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.9.0.129388-r0
Event History
Frequently Asked Questions
What level of access does an attacker need?
The vulnerability is network-accessible and has low attack complexity. An attacker needs low-level privileges, but no user interaction is required.
What is the expected impact if exploited?
The reported impact is limited to confidentiality, with a low impact rating. No integrity or availability impact is indicated, and the scope is unchanged.
How can I determine whether my deployment is affected?
The advisory identifies the cleanstart/sonarqube software package, but it does not provide affected or fixed version information. Review the referenced advisory records for version-specific applicability.