Red Hat Security Advisory

RHSA-2022:7177

Red Hat Camel for Spring Boot 3.14.5 release and security update

Released 2022-10-25 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2021-05527 CVE-2021-22573 · GHSA-hw42-3568-wj87

LOW 39

The vulnerability is that IDToken verifier does not verify if token is properly signed.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.003 Published 2022-05-03 Partial fix · 1.33.2, 1.33.3 CWE-347