CVE-2024-20945 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting specific versions. It allows a low privileged attacker with logon access to the affected infrastructure to potentially gain unauthorized access to critical data. The vulnerability involves the Security component and can be exploited via APIs, including through web services that supply data to these APIs. It also impacts Java deployments running sandboxed Java Web Start applications or applets that load untrusted code relying on the Java sandbox. The CVSS 3.1 base score is 4.7, indicating a medium severity with confidentiality impact only. Oracle has released patches for this and other vulnerabilities in their January 2024 Critical Patch Update advisory.