Red Hat Security Advisory

RHSA-2022:7257

Red Hat Integration Camel-K 1.8.1 security update

Released 2022-10-27 · Red Hat rating Low · View on Red Hat →

Fixed in

RHINT Camel-K 1.8.1

Fixes 2 records

TI-2021-09398 CVE-2021-28169 · GHSA-gwcr-j4wh-j3cq

Information disclosure in Eclipse Jetty

MEDIUM 64

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.7848 Published 2021-06-09 Partial fix · 9.4.41, 10.0.3 +1 CWE-200

TI-2022-13029 CVE-2022-30973 · GHSA-qw3f-w4pf-jh5f

Missing fix for CVE-2022-30126 in 1.28.2

LOW 29

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01982 Published 2022-05-31 Partial fix · 1.28.3 CWE-1333