com.linecorp.armeria:armeria-grpc (0.69.0), com.linecorp.armeria:armeria-jetty (0.69.0) +17 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (0.69.0)

com.linecorp.armeria:armeria MAVEN version 0.69.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria and may be impacted: - com.linecorp.armeria:armeria-grpc 0.69.0 - com.linecorp.armeria:armeria-jetty 0.69.0 -...

com.linecorp.armeria:armeria-brave (0.90.0), com.linecorp.armeria:armeria-grpc (0.90.0) +31 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (0.90.0)

com.linecorp.armeria:armeria MAVEN version 0.90.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria and may be impacted: - com.linecorp.armeria:armeria-brave 0.90.0 - com.linecorp.armeria:armeria-grpc 0.90.0 -...

com.linecorp.armeria:armeria-brave (0.90.2), com.linecorp.armeria:armeria-grpc (0.90.2) +41 more potentially affected by CVE-2023-38493 via com.linecorp.armeria:armeria (0.90.2)

com.linecorp.armeria:armeria MAVEN version 0.90.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria and may be impacted: - com.linecorp.armeria:armeria-brave 0.90.2 - com.linecorp.armeria:armeria-grpc 0.90.2 -...

logback:JoranFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=5737100916686848 Project: logback Fuzzing Engine: libFuzzer Fuzz Target: JoranFuzzer Job Type: libfuzzerasanlogback Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability which can allow an attacker to execute arbitrary code

Summary Logback could allow a remote authenticated attacker to execute arbitrary code on the system. Vulnerability Details CVEID:CVE-2021-42550 DESCRIPTION: Logback could allow a remote authenticated attacker to execute arbitrary code on the system. By using a specially-crafted configuration, an...

SUSE SLED15: antlr3-bootstrap-tool / antlr3-java / antlr3-java-javadoc / etc (SUSE-SU-2023:2097-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2097-1 advisory. maven: - Version update from 3.8.5 to 3.8.6 jscSLE-23217: Security fixes: - CVE-2021-42550: Update Versio...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

Design/Logic Flaw

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

CVE-2023-23591

CVE-2023-23591 affects Terminalfour’s Logback component. An information disclosure vulnerability allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. Fixed releases are Terminalfour 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1. The i...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

PT-2023-19064 · Unknown +1 · Terminalfour +1

Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.2.18.7 Terminalfour versions prior to 8.2.18.2.2 Terminalfour versions prior to 8.3.11.1 Terminalfour versions prior to 8.3.14.1 Description: The Logback component in Terminalfour allows OS administrators to...

CVE-2023-23591: Insertion of Sensitive Information into Log File

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilties (CVE-2022-43548, CVE-2020-7676, CVE-2021-42550, CVE-2021-38561, CVE-2022-32149)

Summary IBM Planning Analytics Workspace is affected by vulnerabilities. Node.js is an open-source and cross-platform JavaScript runtime environment CVE-2022-43548. Angular is a JavaScript framework that extends HTML CVE-2020-7676. Logback is a logging library for Java CVE-2021-42550. Golang Go...

K97521840: logback vulnerability CVE-2021-42550

Security Advisory Description In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. CVE-2021-42550 Impact There is no impact; F5 products...

SUSE CVE-2017-5929

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components...

SUSE CVE-2019-12384

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible...

SUSE CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

SUSE CVE-2020-36188

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...