Red Hat Security AdvisoryRHSA-2022:0501
Red Hat Integration - Service Registry release and security update [2.0.3.GA]
Released 2022-02-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHINT Service Registry 2.0.3 GA
Fixes 2 records
Priority MEDIUM 49
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference e…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07441 · Published 2021-09-19 · Partial fix · 2.2.3,2.1.7, 2.2.3 +1 CWE-200
Priority LOW 36
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.06201 · Published 2021-09-22 · Partial fix · 2.6.3, 2.7.2 +1 CWE-203
