Red Hat Security AdvisoryRHSA-2021:3207
Red Hat Integration Camel Quarkus Tech-Preview 2 security update
Released 2021-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Integration Camel Quarkus 2
Fixes 8 records
Priority MEDIUM 64
Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.49104 · Published 2021-01-05 · Fixed in 1.11.3 CWE-23
Priority MEDIUM 42
Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.04204 · Published 2020-11-24 · Partial fix · 9.1.3 CWE-74
Priority LOW 36
A flaw was found in the Undertow AJP connector.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01375 · Published 2021-02-23 · Partial fix · 2.1.5, 2.0.33 CWE-400
Priority LOW 35
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.01312 · Published 2021-03-16 · Partial fix · 4.7.2, 4.11.2 +2 CWE-22
Priority LOW 34
In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal state.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00861 · Published 2021-02-03 · Partial fix CWE-372
Priority LOW 34
Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.04544 · Published 2020-09-10 · Partial fix · 5.15.12 CWE-306
Priority LOW 29
In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02604 · Published 2021-02-03 · Partial fix · 1.4.21 CWE-276
Priority LOW 27
Apache Groovy provides extension methods to aid with creating temporary directories.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01027 · Published 2020-12-07 · Partial fix · 2.4.21, 2.5.14 +1 CWE-379
THREATIST.IORead the docs