(RHSA-2024:0720) Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update

2024-02-0714:57:35

access.redhat.com

migration toolkit

runtimes security

apache-ivy

follow-redirects

cve-2022-46751

cve-2023-26159

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

48.4%

JSON

Migration Toolkit for Runtimes 1.2.4 ZIP artifacts

Security Fix(es):

apache-ivy: XML External Entity vulnerability (CVE-2022-46751)
follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() (CVE-2023-26159)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.