Lucene search
RedHatRHSA-2024:3550HistoryJun 03, 2024 - 11:50 a.m.
(RHSA-2024:3550) Important: HawtIO 4.0.0 for Red Hat build of Apache Camel 4 Release and security update.
2024-06-0311:50:58
access.redhat.com
2
hawtio
red hat
apache camel
security
stability
spring-security
nodejs-ip
jose4j
netty-codec-http
follow-redirects
access control
denial of service
resource allocation
credential leak
HawtIO 4.0.0 for Red Hat build of Apache Camel 4 GA Release is now available.
The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products.
-
spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated (TRIAGE CVE-2024-22234)
-
nodejs-ip: arbitrary code execution via the isPublic() function (TRIAGE CVE-2023-42282)
-
jose4j: denial of service via specially crafted JWE (TRIAGE CVE-2023-51775)
-
netty-codec-http: Allocation of Resources Without Limits or Throttling (TRIAGE CVE-2024-29025)
-
follow-redirects: Possible credential leak (TRIAGE CVE-2024-28849)
Related
cvelist
cvelist
ibm
ibm
Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities
2024-04-12 15:48:59
nvd
nvd
cve
cve
ubuntucve
ubuntucve
prion
prion
Improper access control
2024-02-20 07:15:00
Design/Logic Flaw
2024-02-29 01:42:00
Design/Logic Flaw
2024-02-08 17:15:00
cnvd
cnvd
Access Control Error Vulnerability in Spring Security
2024-02-21 00:00:00
veracode
veracode
Broken Access Control
2024-02-21 06:57:47
Credential Leakage
2024-03-18 04:38:05
Denial Of Service (DoS)
2024-03-28 03:09:13
github
github
Netty's HttpPostRequestDecoder can OOM
2024-03-25 19:40:50
jose4j denial of service via specifically crafted JWE
2024-02-29 03:33:14
cgr
cgr
CVE-2024-28849 vulnerabilities
2024-05-19 03:07:16
CVE-2024-29025 vulnerabilities
2024-05-19 03:07:16
CVE-2023-51775 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 40 Update: pgadmin4-8.4-2.fc40
2024-03-23 00:52:38
cbl_mariner
cbl_mariner
CVE-2024-28849 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
CVE-2023-42282 affecting package nodejs18 for versions less than 18.18.2-4
2024-03-05 17:52:42
CVE-2023-42282 affecting package nodejs for versions less than 16.20.2-3
2024-03-05 17:52:42
redhatcve
redhatcve
osv
osv
CVE-2024-29025
2024-03-25 20:15:08
Netty's HttpPostRequestDecoder can OOM
2024-03-25 19:40:50
nessus
nessus
Fedora 40 : pgadmin4 (2024-db558f6fb2)
2024-04-29 00:00:00
RHEL 6 : netty-codec-http (Unpatched Vulnerability)
2024-06-22 00:00:00
Debian dla-3834 : libnetty-java - security update
2024-06-22 00:00:00
openvas
openvas
Fedora: Security Advisory for pgadmin4 (FEDORA-2024-db558f6fb2)
2024-03-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1079-1)
2024-05-07 00:00:00
Ubuntu: Security Advisory (USN-6643-1)
2024-02-20 00:00:00
debiancve
debiancve
wolfi
wolfi
CVE-2024-29025 vulnerabilities
2024-06-25 03:08:26
CVE-2023-51775 vulnerabilities
2024-05-29 03:07:31
CVE-2024-28849 vulnerabilities
2024-06-25 03:08:26
ubuntu
ubuntu
NPM IP vulnerability
2024-02-19 00:00:00
redhat
redhat
(RHSA-2024:2705) Moderate: Red Hat build of Quarkus 3.2.12 release and security update
2024-05-09 11:54:42
(RHSA-2024:2106) Moderate: Red Hat build of Quarkus 3.8.4 release
2024-05-07 16:19:27
redos
redos
ROS-20240514-04
2024-05-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00