org.apache.camel:camel-cometd (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0) +109 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (7.5.3.v20111011)

org.eclipse.jetty:jetty-server MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.apache.camel:camel-cometd =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1, =2.9.0-rc1,...

Security Bulletin: Provision to add https and Secure Flag to bayeux_browser cookie for IBM Control Desk.

Summary BAYEUXBROWSER cookie is generated from Cometd Server and it remains live with the session. In older versions of cometd server, BAYEUXBROWSER cookie was neither true for https nor for secure. But in the current version ie. 5.0.3, there is a provision to make the cookie true for https and...

com.googlecode.mycontainer:maven-mycontainer-plugin (>=1.2.29, <=1.2.51), com.googlecode.mycontainer:mycontainer-gae-web (>=1.2.29, <=1.2.51) +58 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.4.0.v20110414)

org.eclipse.jetty:jetty-http MAVEN version 7.4.0.v20110414 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.googlecode.mycontainer:maven-mycontainer-plugin =1.2.29, =1.2.29, =1.2.29, =1.2.29,...

com.azavea.geotrellis:geotrellis-jetty_2.10 (>=0.9.0-rc1, <=0.10.0-m1), com.azavea.geotrellis:geotrellis-jetty_2.11 (0.10.0-m1) +56 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (8.1.0.rc4)

org.eclipse.jetty:jetty-http MAVEN version 8.1.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - com.azavea.geotrellis:geotrellis-jetty2.10 =0.9.0-rc1, =0.8.0-rc2, =1.5.ga, =1.8.ga -...

org.cometd.java:cometd-examples-java (1.0.beta10), org.cometd.java:cometd-java-client (1.0.beta10) +34 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.0.0.m4)

org.eclipse.jetty:jetty-http MAVEN version 7.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.0.beta10 - org.cometd.java:cometd-java-client 1.0.beta10 -...

org.cometd.java:cometd-java-client (2.4.0.rc3), org.cometd.java:cometd-java-examples (2.4.0.rc3) +59 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.6.0.rc5)

org.eclipse.jetty:jetty-http MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-java-client 2.4.0.rc3 - org.cometd.java:cometd-java-examples 2.4.0.rc3 -...

org.cometd.java:cometd-examples-java (1.1.2), org.cometd.java:cometd-java-client (>=1.1.2, <=2.0.0) +51 more potentially affected by CVE-2022-2047 via org.eclipse.jetty:jetty-http (7.1.5.v20100705)

org.eclipse.jetty:jetty-http MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-http and may be impacted: - org.cometd.java:cometd-examples-java 1.1.2 - org.cometd.java:cometd-java-client =1.1.2, =1.1....

CVE-2022-24721

A flaw was found in CometD’s Oort package. This flaw allows an attacker to monitor unauthorized channels when connected remotely...

Improper Authorization

org.cometd.java:cometd-java-oort is vulnerable to improper authorization. Remote attackers are able to subscribe and publish to Oort and Seti channels due to improper authorization, allowing interception of internal cluster traffic. As a result the remote attackers are able to create/modify/delet...

org.cometd:cometd-demo (3.1.3) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.3)

org.cometd.java:cometd-java-oort MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.3 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.0.0.beta2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.0.beta2)

org.cometd.java:cometd-java-oort MAVEN version 3.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.0.beta2 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.1.14) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.14)

org.cometd.java:cometd-java-oort MAVEN version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.14 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.7.0-beta2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.7.0-beta2)

org.cometd.java:cometd-java-oort MAVEN version 2.7.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.7.0-beta2 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.3.1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.3.1)

org.cometd.java:cometd-java-oort MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.3.1 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.0.0.rc2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.0.0.rc2)

org.cometd.java:cometd-java-oort MAVEN version 2.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.0.0.rc2 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.1.0-rc0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.1.0-rc0)

org.cometd.java:cometd-java-oort MAVEN version 3.1.0-rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.1.0-rc0 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (3.0.2) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.2)

org.cometd.java:cometd-java-oort MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.2 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (2.1.0) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.1.0)

org.cometd.java:cometd-java-oort MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.1.0 Source cves: CVE-2022-24721 Source advisory: OSV:GHSA-RJMQ-6V55-4R...

org.cometd:cometd-demo (3.0.0.beta1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (3.0.0.beta1)

org.cometd.java:cometd-java-oort MAVEN version 3.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 3.0.0.beta1 Source cves: CVE-2022-24721 Source advisory:...

org.cometd:cometd-demo (2.5.0-rc1) potentially affected by CVE-2022-24721 via org.cometd.java:cometd-java-oort (2.5.0-rc1)

org.cometd.java:cometd-java-oort MAVEN version 2.5.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.cometd.java:cometd-java-oort and may be impacted: - org.cometd:cometd-demo 2.5.0-rc1 Source cves: CVE-2022-24721 Source advisory:...