Design/Logic Flaw

🗓️ 31 May 2022 14:15:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 25 Views

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in Apache Tika

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tika	29 Jun 202202:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tika security vulnerabilities found during Open Source Scan in IBM Content Collector for email in Content Search Services (affected, not vulnerable)	30 Dec 202221:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Tika used by Content Collector for Email in Content Search Services container (affected, not vulnerable)	2 Nov 202216:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis vulnerable to multiple vulnerabilities in Apache Tika (CVE-2022-30126, CVE-2022-33879, CVE-2022-30973)	17 Nov 202216:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities found in Apache Tika used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	24 Jun 202214:50	–	ibm
ATTACKERKB	CVE-2022-33879	27 Jun 202222:15	–	attackerkb

Source	Link
lists	www.lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p
openwall	www.openwall.com/lists/oss-security/2022/05/31/2
openwall	www.openwall.com/lists/oss-security/2022/06/27/5
security	www.security.netapp.com/advisory/ntap-20220722-0004/

27 Oct 2022 16:41Current

4.5Medium risk

Vulners AI Score4.5

EPSS0.00536

logic flaw cve-2022-30126 apache tika standardstext class denial of service backtracking non-standard handler 1.28.2 1.28.3