Moderate severity vulnerability that affects org.apache.karaf:apache-karaf

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-8750 · ADVISORY
• access.redhat.com/errata/RHSA-2018:1322 · WEB
• GitHub Advisory GHSA-chj8-5xgw-wcvj · ADVISORY
• karaf.apache.org/security/cve-2016-8750.txt · WEB
• securityfocus.com/bid/103098 · WEB

Autres vulnérabilités de org.apache.karaf:apache-karaf

• CVE-2022-40145CRITIQUE 9.8This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL. The …
• CVE-2022-22932MOYENNE 5.3Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder.…
• CVE-2019-0191MOYENNE 6.5Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It the…
• CVE-2018-11787ÉLEVÉE 8.1In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/conso…
• CVE-2018-11786ÉLEVÉE 8.8In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any use…