Security Bulletin: Multiple vulnerabilities in Apache Camel core affect IBM Application Performance Management products

Summary Apache Camel core is used by IBM Application Performance Management. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by an error in t...

org.apache.camel:camel-activemq (1.0.0), org.apache.camel:camel-bam (1.0.0) +18 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.0.0)

org.apache.camel:camel-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.0.0 - org.apache.camel:camel-bam 1.0.0 - org.apache.camel:camel-cxf 1.0...

org.apache.camel:camel-activemq (1.1.0), org.apache.camel:camel-bam (1.1.0) +23 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.1.0)

org.apache.camel:camel-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-activemq 1.1.0 - org.apache.camel:camel-bam 1.1.0 - org.apache.camel:camel-cxf 1.1...

com.webtide.hightide:auctiondemo (6.1h.8), com.webtide.hightide:hightide-resources (6.1h.8) +67 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.2.0)

org.apache.camel:camel-core MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.webtide.hightide:auctiondemo 6.1h.8 - com.webtide.hightide:hightide-resources 6.1h.8 -...

com.googlecode.mycontainer:mycontainer-jms (>=1.2.29, <=1.7.5), com.webtide.hightide:auctiondemo (6.1h.10) +92 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.3.0)

org.apache.camel:camel-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.googlecode.mycontainer:mycontainer-jms =1.2.29, =1.0.1, =2.7.0 -...

org.apache.camel:camel-amqp (1.4.0), org.apache.camel:camel-atom (1.4.0) +58 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.4.0)

org.apache.camel:camel-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.4.0 - org.apache.camel:camel-atom 1.4.0 - org.apache.camel:camel-bam 1.4.0 ...

org.apache.activemq.tooling:maven-activemq-memtest-plugin (5.2.0), org.apache.activemq.tooling:maven-activemq-perf-plugin (5.2.0) +97 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.5.0)

org.apache.camel:camel-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.activemq.tooling:maven-activemq-memtest-plugin 5.2.0 -...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.github.jknack:mwa-camel (0.4.0) +208 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.11.0, <=2.11.1)

org.apache.camel:camel-core MAVEN version =2.11.0, =1.5, =1.0.0, =5.14, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 and more Source cves: CVE-2013-4330 Source advisory: OSV:GHSA-X9FV-C87W-55WC...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.github.jknack:mwa-camel (0.4.0) +208 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.11.0, <=2.11.1)

org.apache.camel:camel-core MAVEN version =2.11.0, =1.5, =1.0.0, =5.14, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 and more Source cves: CVE-2013-4330 Source advisory: GHSA-X9FV-C87W-55WC...

org.apache-extras.camel-extra:camel-esper (2.12.0), org.apache-extras.camel-extra:camel-esper-demo (2.12.0) +215 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (2.12.0)

org.apache.camel:camel-core MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache-extras.camel-extra:camel-esper 2.12.0 - org.apache-extras.camel-extra:camel-esper-demo 2.12.0...

org.apache.camel:camel-amqp (1.6.1), org.apache.camel:camel-atom (1.6.1) +60 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.6.1)

org.apache.camel:camel-core MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.1 - org.apache.camel:camel-atom 1.6.1 - org.apache.camel:camel-bam 1.6.1 ...

org.apache.camel:camel-amqp (1.6.4), org.apache.camel:camel-atom (1.6.4) +58 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.6.4)

org.apache.camel:camel-core MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.4 - org.apache.camel:camel-atom 1.6.4 - org.apache.camel:camel-bam 1.6.4 ...

com.catify.bpmn:bpmn-engine-dist-jpa-camel (1.1), com.catify.bpmn:integration-spi-camel (1.1) +320 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.10.0, <=2.10.6)

org.apache.camel:camel-core MAVEN version =2.10.0, =0.3.4, =5.8.0-ness-1, =1.5.1, =1.6.0 and more Source cves: CVE-2013-4330 Source advisory: GHSA-X9FV-C87W-55WC...

org.apache.camel:camel-amqp (1.6.3), org.apache.camel:camel-atom (1.6.3) +58 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (1.6.3)

org.apache.camel:camel-core MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel:camel-amqp 1.6.3 - org.apache.camel:camel-atom 1.6.3 - org.apache.camel:camel-bam 1.6.3 ...

RHEL 6 : activemq (RHSA-2014:0245)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0245 advisory. Apache ActiveMQ provides a SOA infrastructure to connect processes across heterogeneous systems. A flaw was found in Apache Camel's parsing ...

Important: Red Hat Security Advisory: activemq security update

An updated activemq package that fixes multiple security issues is now available for Red Hat OpenShift Enterprise 2.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: Apache Camel security update

An update for the Apache Camel component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss BRMS 6.0.0, and Red Hat JBoss BPMS 6.0.0. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.github.jknack:mwa-camel (0.4.0) +208 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=2.11.0, <=2.11.1)

org.apache.camel:camel-core MAVEN version =2.11.0, =1.5, =1.0.0, =5.14, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 and more Source cves: CVE-2013-4330 Source advisory: MEND:CVE-2013-4330...

org.apache-extras.camel-extra:camel-esper (2.12.0), org.apache-extras.camel-extra:camel-esper-demo (2.12.0) +215 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (2.12.0)

org.apache.camel:camel-core MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache-extras.camel-extra:camel-esper 2.12.0 - org.apache-extras.camel-extra:camel-esper-demo 2.12.0...

com.bluelock:camel-spring-amqp (>=1.0, <=1.4), com.github.lewissk:hornetq-component (0.1) +313 more potentially affected by CVE-2013-4330 via org.apache.camel:camel-core (>=1.0.0, <=2.9.6)

org.apache.camel:camel-core MAVEN version =1.0.0, =1.0, =0.0.1, =0.27, =0.28, =0.6, =0.6, =0.13, =0.4.1, =0.4.1, =0.4.1, =0.5, =0.7, =0.16, =0.22, =0.30 and more Source cves: CVE-2013-4330 Source advisory: MEND:CVE-2013-4330...