com.bluelock:camel-spring-amqp (1.0), com.osinka.camel:camel-scala-extra_2.8.1 (1.2.4) +138 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.8.2)

org.apache.camel:camel-core MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.bluelock:camel-spring-amqp 1.0 - com.osinka.camel:camel-scala-extra2.8.1 1.2.4 -...

Spring AMQP Installed

Binary data pivotalsoftwarespringamqpinstalled.nbin...

GHSA-W4G2-9HJ6-5472 Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

br.jus.stf.digital:core (>=0.1.0, <=2.3.1), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +397 more potentially affected by CVE-2018-11087 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.7.9.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =0.1.0, =1.0.0-rc, =1.0.6.oss, =1.0.6.oss, =0.0.1, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.0, =1.0.1 and more Source cves: CVE-2018-11087 Source advisory: GHSA-W4G2-9HJ6-5472...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2018-11087 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2018-11087 Source advisor...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2018-11087 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2018-11087 Source...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2018-11087 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2018-11087 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...

br.jus.stf.digital:core (>=0.1.0, <=2.3.1), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +397 more potentially affected by CVE-2018-11087 via org.springframework.amqp:spring-amqp (>=1.0.0.release, <=1.7.9.release)

org.springframework.amqp:spring-amqp MAVEN version =1.0.0.release, =0.1.0, =1.0.0-rc, =1.0.6.oss, =1.0.6.oss, =0.0.1, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.1.0-release, =1.0, =1.0.1 and more Source cves: CVE-2018-11087 Source advisory: OSV:GHSA-W4G2-9HJ6-5472...

cc.voox:publisher (>=0.1.0.beta, <=2.2.0), cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-amqp-conf (>=3.0.0.release, <=3.0.1.release) +111 more potentially affected by CVE-2018-11087 via org.springframework.amqp:spring-amqp (>=2.0.0.release, <=2.0.5.release)

org.springframework.amqp:spring-amqp MAVEN version =2.0.0.release, =0.1.0.beta, =3.0.0.release, =3.0.0.release, =0.1.0-rc1, =1.0.0, =1.0.0, =v2.0.0, =v2.0.1 - com.societegenerale:rabbitmq-advanced-core 2.0.0.release - com.societegenerale:rabbitmq-advanced-parent 2.0.0.release -...

cc.voox:publisher (>=0.1.0.beta, <=2.2.0), cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-amqp-conf (>=3.0.0.release, <=3.0.1.release) +111 more potentially affected by CVE-2018-11087 via org.springframework.amqp:spring-amqp (>=2.0.0.release, <=2.0.5.release)

org.springframework.amqp:spring-amqp MAVEN version =2.0.0.release, =0.1.0.beta, =3.0.0.release, =3.0.0.release, =0.1.0-rc1, =1.0.0, =1.0.0, =v2.0.0, =v2.0.1 - com.societegenerale:rabbitmq-advanced-core 2.0.0.release - com.societegenerale:rabbitmq-advanced-parent 2.0.0.release -...

Input validation

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087 TLS validation error

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087: Improper Certificate Validation

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

PT-2018-10299

Name of the Vulnerable Software and Affected Versions Pivotal Spring AMQP versions 1.x prior to 1.7.10 Pivotal Spring AMQP versions 2.x prior to 2.0.6 Description The issue exposes a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to...

CVE-2017-8045

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...