Security Bulletin: Apache Camel Core vulnerability in IBM Tivoli Monitoring Data Provider (CVE-2020-11971)

Summary IBM Tivoli Monitoring Data provider is vulnerable to Apache Camel Core vulnerabilty CVE-2020-11971 Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by a rebind flaw in JMX. By sending a...

com.bluelock:camel-spring-amqp (>=1.0, <=1.6.3), com.catify.bpmn:bpmn-engine-dist-jpa-camel (1.1) +452 more potentially affected by CVE-2014-0002 via org.apache.camel:camel-core (>=2.0-m1, <=2.11.3)

org.apache.camel:camel-core MAVEN version =2.0-m1, =1.0, =0.3.4, =0.4.0 - com.github.lewissk:hornetq-component 0.1 - com.github.microon:microon-services-calendar 0.0 - com.github.rmannibucau:camel-loader 0.0.1 and more Source cves: CVE-2014-0002 Source advisory: GHSA-2FW5-RVF2-JQ56...

CVE-2018-8027

Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor...

PT-2018-18392

Name of the Vulnerable Software and Affected Versions: Apache Camel versions 2.20.0 through 2.20.3 Apache Camel version 2.21.0 Description: The issue concerns an XXE vulnerability in the XSD validation processor of the Apache Camel Core. Recommendations: For Apache Camel versions 2.20.0 through...