Security Bulletin: CVE-2015-7450 affects the desktop IBM Process Designer used in IBM Business Automation Workflow and IBM Business Process Manager

Summary The following vulnerability in Apache commons that affects the desktop IBM Process Designer has been addressed. Vulnerability Details CVEID:CVE-2015-7450 DESCRIPTION: Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and...

Security Bulletin: An Apache Commons Compress vulnerability has been identified with the embedded IBM FileNet P8 Content Platform Engine component in IBM Business Process Manager and IBM Business Automation Workflow

Summary An Apache Commons Compress vulnerability has been identified with the embeded IBM FileNet P8 Content Platform Engine component, specifically with the Administration Console for Content Platform Engine application, in IBM Business Process Manager and IBM Business Automation Workflow...

MAL-2022-2127 Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in commons-ebay

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in commons-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fca6c21af828f60fe97221a1964dd96fdfa94550187dd44fb09f7201f4d34f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2128 Malicious code in commons-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862814d566867240e7ce2abb5bd5070f301f288285ce73b803bfb14a4b158e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in commons-inc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in commons-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862814d566867240e7ce2abb5bd5070f301f288285ce73b803bfb14a4b158e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview hyrule-react-commons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

OSV-2022-871 Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51154 Crash type: Security exception Crash state: java.base/java.util.Collections$UnmodifiableCollection.forEach org.apache.commons.configuration2.tree.NodeTreeWalker.dfs...

PT-2022-37266 · Apache · Apache Commons Configuration2

Name of the Vulnerable Software and Affected Versions: Apache Commons Configuration2 affected versions not specified Description: The issue is related to a security exception in the java.util.Collections$UnmodifiableCollection.forEach method, which is called by...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=4903512403738624 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=5029703743832064 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by WebSphere Application Server and WebSphere Application Server Hypervisor Edition. This vulnerability does not affect the IBM HTTP Server or versions of WebSphere Application Server prior ...

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to remote code execution due to Apache Commons Configuration (CVE-2022-33980)

Summary IBM Sterling Connect:Direct for UNIX object storage file IO exits, and IBM Sterling Connect:Direct for UNIX components Install Agent and File Agent are vulnerable to remote code execution due to Apache Commons Configuration CVE-2022-33980. Apache Commons Configuration has been upgraded to...

Security Bulletin: Apache Commons Configuration Vulnerability affects IBM SPSS Analytic Server [CVE-2022-33980]

Summary There is a vulnerability in the version of Apache Commons Configuration that was included in IBM SPSS Analytic Server. This vulnerability has been addressed. CVE-2022-33980 Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons Configuration could allow a remote attacker t...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-13956

Summary IBM TRIRIGA Application Platform discloses CVE-2020-13956 Vulnerability Details CVEID:CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of malformed authority component in request URIs. By passing...

org.hawkular.agent:hawkular-dmr-client (>=0.15.4.final, <=0.15.6.final), org.hawkular.agent:hawkular-wildfly-agent (>=0.15.4.final, <=0.15.6.final) +92 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (2.0.5.final)

org.wildfly.core:wildfly-server MAVEN version 2.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.hawkular.agent:hawkular-dmr-client =0.15.4.final, =0.15.4.final, =0.3.3.final,...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

PT-2022-37217

Name of the Vulnerable Software and Affected Versions Apache Commons JXPath affected versions not specified Description A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the toString function of CoreFunction and involves the append method of...