CVE-2022-37866 Apache Ivy allows path traversal in the presence of a malicious repository

🗓️ 07 Nov 2022 00:00:00Reported by apacheType

Apache Ivy vulnerability in artifact path traversa

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to Path Traversal due to Apache Ivy (CVE-2022-37865, CVE-2022-37866)	30 Mar 202319:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Ivy affect IBM Cloud Pak System	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in ivy-2.4.0.jar affect IBM Application Performance Management products	7 Sep 202306:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202318:23	–	ibm
Tenable Nessus	Amazon Linux 2023 : apache-ivy, apache-ivy-javadoc (ALAS2023-2023-174)	3 May 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : apache-ivy (ALAS-2023-2165)	26 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : apache-ivy (ALAS-2024-1910)	23 Jan 202400:00	–	nessus

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Ivy",
    "versions": [
      {
        "version": "2.0.0",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "2.5.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/htxbr8oc464hxrgroftnz3my70whk93b
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDIFDL5WSBEKBUVKTABUFDDD25SBNJLS/

04 Jul 2023 00:00Current

7.6High risk

Vulners AI Score7.6

EPSS0.01596

CWE-22