| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| io.github.1tchy.java9modular.org.apache.commons:commons-compress | = 1.18.1 | |
| org.apache.commons:commons-compress | ≥ 1.15, < 1.19 | 1.19 |
| commons compress | ≥ 1.15, ≤ 1.18 | |
| banking payments | ≥ 14.1.0, ≤ 14.4.0 | |
| banking platform | = 2.6.2= 2.7.0= 2.8.0= 2.9.0 | |
| communications element manager | ≥ 8.2.0, ≤ 8.2.2 | |
| communications ip service activator | = 7.3.0= 7.4.0 | |
| communications session report manager | ≥ 8.2.0, ≤ 8.2.2 | |
| communications session route manager | ≥ 8.2.0, ≤ 8.2.2 | |
| customer management and segmentation foundation | = 18.0 | |
| essbase | = 21.2 | |
| flexcube investor servicing | = 12.1.0= 12.3.0= 12.4.0= 14.0.0= 14.1.0 | |
| flexcube private banking | = 12.0.0= 12.1.0 | |
| hyperion infrastructure technology | = 11.1.2.4 | |
| jdeveloper | = 12.2.1.4.0 | |
| peoplesoft enterprise pt peopletools | = 8.56= 8.57= 8.58 | |
| primavera gateway | = 19.12.0≥ 18.8.0, ≤ 18.8.8 | |
| retail integration bus | = 15.0= 16.0 | |
| retail xstore point of service | = 15.0= 16.0= 17.0= 18.0= 19.0 | |
| webcenter portal | = 12.2.1.3.0= 12.2.1.4.0 |
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン