com.smoketurner.dropwizard:atomix-core (>=1.2.3-1, <=1.2.3-2), io.atomix:atomix-agent (2.1.0-beta1) +1 more potentially affected by CVE-2020-35214 via io.atomix:atomix (2.1.0-beta1)

io.atomix:atomix MAVEN version 2.1.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.smoketurner.dropwizard:atomix-core =1.2.3-1, =1.2.3-2 - io.atomix:atomix-agent 2.1.0-beta1 - io.atomix:atomix-rest...

in.ashwanthkumar:suuchi-cluster-atomix (>=0.2.12, <=0.2.16), in.ashwanthkumar:suuchi-core (>=0.1.0, <=0.2.11) +4 more potentially affected by CVE-2020-35214 via io.atomix:atomix (1.0.0-rc9)

io.atomix:atomix MAVEN version 1.0.0-rc9 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - in.ashwanthkumar:suuchi-cluster-atomix =0.2.12, =0.1.0, =0.1.0, =0.1.0, =1.6.0, =1.8.0 Source cves: CVE-2020-35214 Source...

com.higgschain.trust:consensus-atomix (>=3.0.0, <=3.0.1), com.smoketurner.dropwizard:atomix-core (>=1.3.5-1, <=1.3.7-1) +87 more potentially affected by CVE-2020-35214 via io.atomix:atomix (>=3.0.0-rc1, <=3.1.5)

io.atomix:atomix MAVEN version =3.0.0-rc1, =3.0.0, =1.3.5-1, =3.0.0-rc1, =3.0.0-rc7, =3.0.0-rc1, =3.0.4, =0.12.0, =0.4.0, =0.7.0 - org.apache.submarine:submarine-interpreter-core 0.4.0 - org.apache.submarine:submarine-python-interpreter 0.4.0 and more Source cves: CVE-2020-35214 Source advisory:...

CVE-2020-35214

creationtimestamp| type| source ---|---|--- 2021-12-16 22:36:02+00:00| seen| https://t.me/cibsecurity/34160...

CVE-2020-35214

Atomix v3.1.5 contains a vulnerability that allows a malicious Atomix node to remove states from ONOS storage by abusing primitive operations. Root cause described across multiple sources is abuse of primitive operations within Atomix, enabling unauthorized state deletions. CVSS data shows networ...