Improper Input Validation in Apache Karaf

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-0219 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• karaf.apache.org/security/cve-2014-0219.txt · WEB
• securityfocus.com/bid/101872 · Third Party Advisory

org.apache.karaf:apache-karaf のその他の脆弱性

• CVE-2022-40145緊急 9.8This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL. The …
• CVE-2022-22932中 5.3Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder.…
• CVE-2019-0191中 6.5Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It the…
• CVE-2018-11787高 8.1In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/conso…
• CVE-2018-11786高 8.8In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any use…