Security Bulletin: Vulnerability in SpringBoot affects watsonx.data

Summary Spring Boot could allow a local authenticated attacker to gain elevated privileges on the system. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2022-27772 DESCRIPTION: Spring Boot could allow a local authenticated attacker to gain elevated privileges on the system, cause...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.erudika:para (>=1.3.0, <=1.7.0) +37 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.0.2.release)

org.springframework.boot:spring-boot MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =1.3.0, =1.1.0.beta5,...

com.erudika:para (1.8.0), com.github.totyumengr:minicubes-cluster (0.2) +55 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.4.release)

org.springframework.boot:spring-boot MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.erudika:para 1.8.0 - com.github.totyumengr:minicubes-cluster 0.2 -...

co.paralleluniverse:comsat-spring-boot (0.3.0), com.bertramlabs.plugins:asset-pipeline-spring-boot (>=2.0.19, <=2.13.1) +49 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.9.release)

org.springframework.boot:spring-boot MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 -...

org.grails:grails-gsp-spring-boot (1.0.0), org.springframework.boot:spring-boot-actuator (1.1.11.release) +29 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.11.release)

org.springframework.boot:spring-boot MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.grails:grails-gsp-spring-boot 1.0.0 -...

biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7), com.clusterra:clusterra-email-sender (>=1.0.13.release, <=1.2.0.release) +275 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.3.release)

org.springframework.boot:spring-boot MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - biz.dfch.j:activiti.wrapper =0.0.6, =1.0.13.release, =1.1.0.release,...

cc.catalysts.boot:cat-boot-javamelody (0.0.4), cn.bestwu:data-rest (1.0.0.m1) +191 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.1.release)

org.springframework.boot:spring-boot MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cc.catalysts.boot:cat-boot-javamelody 0.0.4 - cn.bestwu:data-rest 1.0.0.m1 -...

ch.sbb.releasetrain:action (0.0.25), ch.sbb.releasetrain:config (0.0.25) +229 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.6.release)

org.springframework.boot:spring-boot MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ch.sbb.releasetrain:action 0.0.25 - ch.sbb.releasetrain:config 0.0.25 -...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39) +236 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.7.release)

org.springframework.boot:spring-boot MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.0.3, =1.2.28, =1.1.2, =1.1.2,...

com.github.microwww:mocker-redis-spring-boot-autoconfigure (>=0.0.1, <=3.0.0), com.github.microwww:mocker-redis-spring-boot-starter (>=0.0.1, <=3.0.2-2.8) +79 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.0.release)

org.springframework.boot:spring-boot MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.microwww:mocker-redis-spring-boot-autoconfigure =0.0.1, =0.0.1,...

com.definesys.mpaas:query-weblogic (1.0.0), io.github.sethdeveloper:fixed-asset-engine (>=0.1.4-jdk8-m2, <=0.2.3-monthly-daily-depre-jdk8) +30 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.12.release)

org.springframework.boot:spring-boot MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.definesys.mpaas:query-weblogic 1.0.0 -...

com.adobe.api.platform:launchpad (>=1.1.11, <=1.2.1), com.adobe.api.platform:launchpad-test-support (>=1.1.11, <=1.2.1) +105 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.1.release)

org.springframework.boot:spring-boot MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.adobe.api.platform:launchpad =1.1.11, =1.1.11, =1.1.16, =0.53.1, =0.1.5,...

com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6), com.canoo.dolphin-platform:dolphin-platform-spring-controller-tester (0.8.6) +183 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.2.release)

org.springframework.boot:spring-boot MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-server-spring =0.6.1, =0.6.1, =0.1,...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=3.3.0), co.paralleluniverse:comsat-spring-boot (0.5.0) +251 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.5.release)

org.springframework.boot:spring-boot MAVEN version 1.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =1.5.0, =2.0.2, =2.0.3, =2.0.2,...

com.github.advantageous:qbit-spring (>=0.9.1-rc11, <=0.9.2-rc14), com.github.jmgilmour:parker-spring-boot (0.1.0) +165 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.6.release)

org.springframework.boot:spring-boot MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.advantageous:qbit-spring =0.9.1-rc11, =2.0.1, =2.2.29, =1.0.4, =1.0....

com.aol.microservices:micro-boot (>=0.64, <=0.72), com.deviceatlas:deviceatlas-spring-mobile-extension (0.1.0) +146 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.7.release)

org.springframework.boot:spring-boot MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.aol.microservices:micro-boot =0.64, =1.17, =1.25.1-release, =0.1, =1.0,...

com.foreach.across.modules:admin-web-module (1.1.1.release), com.foreach.across.modules:debug-web-module (1.0.1.release) +131 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.8.release)

org.springframework.boot:spring-boot MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.foreach.across.modules:admin-web-module 1.1.1.release -...

au.com.mountain-pass:hyperstate (>=1, <=3), cc.catalysts.boot:cat-boot-cluster (>=0.0.10, <=0.1.14) +196 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.2.release)

org.springframework.boot:spring-boot MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =0.0.5, =0.0.5, =0.1.8, =0.0.10,...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.6), co.fingerprintsoft:notification-spring-boot-starter (1.0.6) +70 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.4.release)

org.springframework.boot:spring-boot MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.6 -...

au.com.mountain-pass:hyperstate (>=4, <=9), ch.sbb.releasetrain:action (>=0.0.21, <=0.0.23) +545 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.5.release)

org.springframework.boot:spring-boot MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.21...