Read the docs
Red Hat Security Advisory

RHSA-2022:5606

Red Hat Integration Camel Extensions for Quarkus 2.7 security update

Released 2022-07-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 9 records

TI-2021-02479 CVE-2021-3520 · GHSA-gmc7-pqv9-966m

Integer overflow in lz4

Priority MEDIUM 55

There's a flaw in lz4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03401 Published 2021-06-02 Partial fix CWE-190
TI-2020-07601 CVE-2020-9492 · GHSA-f8vc-wfc8-hxqh

Incorrect authorization in Apache Hadoop

Priority MEDIUM 45

In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04493 Published 2021-01-26 Partial fix · 3.2.2, 3.1.4 +1 CWE-863
TI-2022-00880 CVE-2022-0981 · GHSA-wr4r-g543-785x

Incorrect authorization in quarkus

Priority MEDIUM 40

A flaw was found in Quarkus.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01168 Published 2022-03-23 Partial fix CWE-863
TI-2021-15833 CVE-2021-38153 · GHSA-3j6g-hxx5-3q26

Timing Attack Vulnerability for Apache Kafka Connect and Clients

Priority LOW 36

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.06201 Published 2021-09-22 Partial fix · 2.6.3, 2.7.2 +1 CWE-203
TI-2021-05125 CVE-2021-22135 · GHSA-62ww-4p3p-7fhj

Information disclosure in Elasticsearch

Priority LOW 27

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01342 Published 2021-05-13 Partial fix · 7.11.2, 6.8.15 CWE-200
TI-2021-05127 CVE-2021-22137 · GHSA-hr65-qq6p-87r4

Information disclosure in Elasticsearch

Priority LOW 26

In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01187 Published 2021-05-13 Partial fix · 7.11.2, 6.8.15 CWE-200
TI-2021-05122 CVE-2021-22132 · GHSA-5fvx-2jj3-6mff

Insufficiently protected credentials in Elasticsearch

Priority LOW 25

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.01222 Published 2021-01-14 Partial fix · 7.10.2 CWE-522