Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Camel-core (CVE-2020-11971)

Summary Rebind Flaw vulnerability in Camel-core may affect IBM Spectrum Control. CVE-2020-11971. Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrad...

Security Bulletin: Apache Camel Core vulnerability in IBM Tivoli Monitoring Data Provider (CVE-2020-11971)

Summary IBM Tivoli Monitoring Data provider is vulnerable to Apache Camel Core vulnerabilty CVE-2020-11971 Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by a rebind flaw in JMX. By sending a...

Security Bulletin: A security vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool Impact (CVE-2020-11971)

Summary Apache Camel is shipped with IBM Tivoli Netcool Impact as part of its backend infrastructure. Information about a security vulnerability affecting Apache Camel has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a...

org.apache.camel.karaf:camel-karaf-commands (2.9.3), org.apache.camel:camel-ahc (2.9.3) +140 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.9.3)

org.apache.camel:camel-core MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel.karaf:camel-karaf-commands 2.9.3 - org.apache.camel:camel-ahc 2.9.3 -...

io.xtech.babel:babel-camel-core_2.10 (>=0.7.0-camel-2.14, <=0.8.0-camel-2.14), io.xtech.babel:babel-camel-core_2.11 (>=0.7.0-camel-2.14, <=0.8.0-camel-2.14) +255 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.14.2)

org.apache.camel:camel-core MAVEN version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - io.xtech.babel:babel-camel-core2.10 =0.7.0-camel-2.14, =0.7.0-camel-2.14, =0.8.0-camel-2.14 -...

com.consol.citrus:citrus-camel (>=2.7.4, <=2.7.9), com.github.igor-suhorukov:camel-aws (>=2.20.1.2, <=2.20.1.5) +719 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.20.1)

org.apache.camel:camel-core MAVEN version 2.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.consol.citrus:citrus-camel =2.7.4, =2.20.1.2, =2.20.1.0, =1.2.23-release, =1.5.6, =1.3.0,...

ca.islandora.alpaca:islandora-connector-derivative (>=0.8.0, <=1.0.5), ca.islandora.alpaca:islandora-indexing-fcrepo (>=0.8.0, <=1.0.5) +616 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.20.4)

org.apache.camel:camel-core MAVEN version 2.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - ca.islandora.alpaca:islandora-connector-derivative =0.8.0, =0.8.0, =0.8.0, =1.0.5 -...

io.xtech.babel:babel-camel-core_2.10 (>=0.7.0-camel-2.13, <=0.8.0-camel-2.13), io.xtech.babel:babel-camel-core_2.11 (>=0.7.0-camel-2.13, <=0.8.0-camel-2.13) +242 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.13.3)

org.apache.camel:camel-core MAVEN version 2.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - io.xtech.babel:babel-camel-core2.10 =0.7.0-camel-2.13, =0.7.0-camel-2.13, =2.13.3, =2.13.3, =2.13.3,...

com.github.oscerd:camel-cassandra (2.18.5), org.apache.camel.karaf:camel-karaf-commands (2.18.5) +542 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.18.5)

org.apache.camel:camel-core MAVEN version 2.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.oscerd:camel-cassandra 2.18.5 - org.apache.camel.karaf:camel-karaf-commands 2.18.5 -...

com.wichell:framework-config (1.0.0), com.wichell:framework-core (1.0.0) +343 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.13.2)

org.apache.camel:camel-core MAVEN version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.wichell:framework-config 1.0.0 - com.wichell:framework-core 1.0.0 - com.wichell:framework-dao 1.0.0 ...

com.bitbreeds.webrtc:webrtc-example (0.2.5), com.bitbreeds.webrtc:webrtc-signaling (0.2.5) +917 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (>=3.0.0-m1, <=3.1.0)

org.apache.camel:camel-core MAVEN version =3.0.0-m1, =1.44.0-m1, =0.11.0, =0.13.0, =0.11.0, =0.11.0, =0.13.0, =0.11.0, =0.17.0, =0.17.0, =0.11.0, =0.13.0, =0.19.1 and more Source cves: CVE-2020-11971 Source advisory: GHSA-HFG5-XPVW-C9X4...

org.apache.camel.karaf:camel-karaf-commands (2.23.3), org.apache.camel.maven:camel-salesforce-maven-plugin (2.23.3) +575 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.23.3)

org.apache.camel:camel-core MAVEN version 2.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel.karaf:camel-karaf-commands 2.23.3 - org.apache.camel.maven:camel-salesforce-maven-plugi...

org.apache.camel:camel-amqp (2.0-m2), org.apache.camel:camel-atom (2.0-m2) +66 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.0-m2)

org.apache.camel:camel-core MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 2.0-m2 - org.apache.camel:camel-atom 2.0-m2 - org.apache.camel:camel-bam...

org.apache.camel.karaf:camel-karaf-commands (2.9.8), org.apache.camel:camel-ahc (2.9.8) +139 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.9.8)

org.apache.camel:camel-core MAVEN version 2.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel.karaf:camel-karaf-commands 2.9.8 - org.apache.camel:camel-ahc 2.9.8 -...

com.bluelock:camel-spring-amqp (1.0), com.osinka.camel:camel-scala-extra_2.8.1 (1.2.4) +138 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.8.2)

org.apache.camel:camel-core MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.bluelock:camel-spring-amqp 1.0 - com.osinka.camel:camel-scala-extra2.8.1 1.2.4 -...

org.apache.camel.karaf:camel-karaf-commands (2.25.0), org.apache.camel.maven:camel-salesforce-maven-plugin (2.25.0) +633 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.25.0)

org.apache.camel:camel-core MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel.karaf:camel-karaf-commands 2.25.0 - org.apache.camel.maven:camel-salesforce-maven-plugi...

de.mhus.cherry.reactive:reactive-dev (>=1.5.0, <=7.0.0), de.mhus.cherry.reactive:reactive-karaf (>=1.5.0, <=7.0.0) +691 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.19.5)

org.apache.camel:camel-core MAVEN version 2.19.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - de.mhus.cherry.reactive:reactive-dev =1.5.0, =1.5.0, =1.0.1, =1.6.0, =1.6.0, =1.6.0, =1.6.1, =1.6.0,...

org.apache.camel:camel-amqp (1.6.1), org.apache.camel:camel-atom (1.6.1) +60 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (1.6.1)

org.apache.camel:camel-core MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.1 - org.apache.camel:camel-atom 1.6.1 - org.apache.camel:camel-bam 1.6.1 ...

com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2), org.apache-extras.camel-extra:camel-esper (2.10.4) +170 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.10.4)

org.apache.camel:camel-core MAVEN version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.nesscomputing.service.activemq:activemq-server =5.8.0-ness-1, =5.8.0-ness-2 -...

com.artnaseef:correlation-id-utils (>=1.0.0, <=1.1.1), com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6) +393 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.17.0)

org.apache.camel:camel-core MAVEN version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.artnaseef:correlation-id-utils =1.0.0, =2.0.0-rc2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1,...