Security Bulletin: Multiple vulnerabilities in Apache Camel core affect IBM Application Performance Management products

Summary Apache Camel core is used by IBM Application Performance Management. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by an error in t...

The vulnerability of Java-Framework templates in the Apache Camel framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java framework Apache Camel is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apache Camel Information Disclosure Vulnerability

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

GHSA-6G2W-257V-3C9F Apache Camel information exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel. This issue affects Apache Camel from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

Apache Camel information exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel. This issue affects Apache Camel from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

CVE-2023-34442

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

CVE-2023-34442 Apache Camel JIRA: Temporary file information disclosure in Camel-Jira

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

CVE-2023-34442 Apache Camel JIRA: Temporary file information disclosure in Camel-Jira

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

CVE-2023-34442 Apache Camel JIRA: Temporary file information disclosure in Camel-Jira

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X through =3.14.8, from 3.18.X through =3.18.7, from 3.20.X through = 3.20.5, from 4.X through = 4.0.0-M3. Users should upgrade to 3.14.9,...

Apache Camel 信息泄露漏洞

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2020-35491 DESCRIPTION: FasterXML jackson-databind could allow a remote attack...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to Apache Camel

Summary Vulnerabilities in Apache Camel such as remote attacker executing arbitrary code, remote attacker obtaining sensitive information may affect IBM Spectrum Control. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a...

Security Bulletin: Apache Camel Core vulnerability in IBM Tivoli Monitoring Data Provider (CVE-2020-11971)

Summary IBM Tivoli Monitoring Data provider is vulnerable to Apache Camel Core vulnerabilty CVE-2020-11971 Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by a rebind flaw in JMX. By sending a...

CVE-2022-45046

This flaw targets the camel-ldap package. According to the maintainers this CVE should be retracted soon. Mitigation Maintainers have added a documentation detail regarding LDAP Injection in Camel LDAP component. Please check the link for more information...

Security Bulletin: A security vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool Impact (CVE-2020-11971)

Summary Apache Camel is shipped with IBM Tivoli Netcool Impact as part of its backend infrastructure. Information about a security vulnerability affecting Apache Camel has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a...

This Week in Spring - October 4th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! Its October 4th, 2022, and Im in Austin, TX, for the new version of show formerly known as the Kafka Summit, here to talk to folks about the amazing opportunities for Spring Boot and Apache Kafka. On the 12th, Ill be in...

GHSA-5WHJ-523X-6J68 Apache Camel camel-hessian component vulnerable to Java object deserialization

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

Apache Camel camel-hessian component vulnerable to Java object deserialization

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

Improper Control of Generation of Code in Apache Camel

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple" in a CamelFileName message header to a 1 FILE or 2 FTP producer...