Lucene search

K
fedoraFedoraFEDORA:3187920C85BB
HistoryMar 07, 2024 - 10:33 p.m.

[SECURITY] Fedora 40 Update: maven-wagon-3.5.3-7.fc40

2024-03-0722:33:19
lists.fedoraproject.org
7
maven wagon
transport abstraction
artifact handling
repository handling
file
http
ftp
ssh/scp
webdav
scm
unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%

Maven Wagon is a transport abstraction that is used in Maven’s artifact and repository handling code. Currently wagon has the following providers: * File * HTTP * FTP * SSH/SCP * WebDAV * SCM (in progress)

OSVersionArchitecturePackageVersionFilename
Fedora40anymaven-wagon< 3.5.3UNKNOWN

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

15.5%

Related for FEDORA:3187920C85BB