Fabric Chaincode Java
Approved changes feed: RSS · Atom
cpe:2.3:a:hyperledger:fabric-chaincode-java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hyperledger (619acd7a-fe8a-59d2-9a70-2faf1d5c7fe4) |
|---|---|
| Product | Fabric Chaincode Java (fb9168fb-70ec-5dd5-a5a2-b5d4fc2c930b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-45581 |
vulnerable | 2026-07-29 00:52:15.629410 |
fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode
MEDIUM (5.5)
fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to before version 2.5.10, when chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS private key password in plaintext. An attacker with access to the chaincode server logs could recover the TLS private key password. If the attacker can also obtain the TLS private key, they could impersonate the chaincode server. This issue has been patched in version 2.5.10.
Published: 2026-06-08T16:53:45.829Z
Updated: 2026-06-09T15:51:04.589Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.