Moderate severity vulnerability that affects org.apache.karaf:apache-karaf

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-8750 · ADVISORY
• access.redhat.com/errata/RHSA-2018:1322 · WEB
• GitHub Advisory GHSA-chj8-5xgw-wcvj · ADVISORY
• karaf.apache.org/security/cve-2016-8750.txt · WEB
• securityfocus.com/bid/103098 · WEB

org.apache.karaf:apache-karaf のその他の脆弱性

• CVE-2022-40145緊急 9.8This vulnerable is about a potential code injection when an attacker has control of the target LDAP server using in the JDBC JNDI URL. The …
• CVE-2022-22932中 5.3Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder.…
• CVE-2019-0191中 6.5Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It the…
• CVE-2018-11787高 8.1In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/conso…
• CVE-2018-11786高 8.8In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any use…