Security Bulletin: Due to the use of JetBrains Kotlin, IBM webMethods BPM is vulnerable to the use of Java API for temporary file and folder creation

Summary IBM webMethods BPM uses JetBrains Kotlin which is vulnerable to the use of Java API for temporary file and folder creation. Vulnerability Details CVEID:CVE-2020-29582 DESCRIPTION: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An...

Security Bulletin: IBM Event Streams is vulnerable to a Broken Access Control attack and Post Exploitation attacks due to the Kotlin component (CVE-2020-29582,CVE-2022-24329).

Summary IBM Event Streams is vulnerable to a Broken Access Control attack and Post Exploitation attacks due to the JetBrains Kotlin component. JetBrains Kotlin is used in event streams to simplify the development process with its concise syntax, enhance code safety with nullability features, and...

Oracle Access Manager (Apr 2024 CPU)

The 12.2.1.4.0 versions of Access Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Webserver Plugin Apache Xerces-C++. The support...

Security Bulletin: IBM MQ Blockchain bridge is vulnerable to an issue within fabric gateway (CVE-2022-24329)

Summary An issue was identified within the JetBrains Kotlin library that is used by Fabric Gateway. IBM MQ uses Fabric Gateway to provide blockchain bridge support. Vulnerability Details CVEID:CVE-2022-24329 DESCRIPTION: JetBrains Kotlin could provide weaker than expected security, caused by...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Kotlin

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Kotlin. Vulnerability Details CVEID: CVE-2022-24329 DESCRIPTION: JetBrains Kotlin could provide weaker than expected security, caused by failing to lock dependencies for Multiplatform Gradle Projects. A remot...

org.jetbrains.kotlin:kdoc (0.6.69), org.jetbrains.kotlin:kdoc-maven-plugin (0.6.69) +4 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.6.69)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.6.69 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.6.69 - org.jetbrains.kotlin:kdoc-maven-plugin 0.6.69 -...

com.netflix.rxjava:rxjava-kotlin (>=0.14.5, <=0.15.1), org.jetbrains.kotlin:kdoc (0.6.800) +4 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.6.800)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.6.800 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.netflix.rxjava:rxjava-kotlin =0.14.5, =0.15.1 - org.jetbrains.kotlin:kdoc 0.6.800 -...

ae.teletronics.nlp:categorisation (>=1.3, <=1.6), ae.teletronics.nlp:entityextraction (>=1.3, <=1.4) +27479 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (>=1.0.0-beta-1038, <=1.6.0-rc2)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version =1.0.0-beta-1038, =1.3, =1.3, =1.0.1, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =v0.0.1, =0.1.12, =0.1.2, =0.0.12, =0.0.12, =1.0.0, =3.30.0.4, =3.46.0.12 and more Source cves: CVE-2022-24329 Source advisory: OSV:GHSA-2QP4-G3Q3-F92W...

com.netflix.rxjava:rxjava-kotlin (>=0.17.6, <=0.19.2), org.jetbrains.kotlin:kdoc (0.7.270) +5 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.7.270)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.270 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.netflix.rxjava:rxjava-kotlin =0.17.6, =0.19.2 - org.jetbrains.kotlin:kdoc 0.7.270 -...

org.jetbrains.kotlin:kdoc (0.8.1527), org.jetbrains.kotlin:kdoc-maven-plugin (0.8.1527) +4 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.8.1527)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.8.1527 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.8.1527 - org.jetbrains.kotlin:kdoc-maven-plugin 0.8.1527 -...

com.fasterxml.jackson.module:jackson-module-kotlin (>=2.5.1.1.kotlinm11, <=2.5.2), com.github.andrewoma.kommon:kommon (0.1) +14 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.11.91)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.11.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.fasterxml.jackson.module:jackson-module-kotlin =2.5.1.1.kotlinm11, =2.5.2 -...

org.jetbrains.kotlin:kdoc (0.6.1658), org.jetbrains.kotlin:kdoc-maven-plugin (0.6.1658) +3 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.6.1658)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.6.1658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.6.1658 - org.jetbrains.kotlin:kdoc-maven-plugin 0.6.1658 -...

com.github.crazyfrozenpenguin:jasminejvm-maven-plugin (1.0.0), org.jetbrains.kotlin:kdoc (0.7.5) potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.7.5)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.github.crazyfrozenpenguin:jasminejvm-maven-plugin 1.0.0 - org.jetbrains.kotlin:kdoc 0.7...

com.chibatching:kotpref (>=0.3.1, <=0.4.1), com.fasterxml.jackson.module:jackson-module-kotlin (>=2.6.2, <=2.6.2-1) +45 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.13.1513)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.13.1513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.chibatching:kotpref =0.3.1, =2.6.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.5.0,...

com.github.salomonbrys.kodein:kodein (1.4.0), com.github.salomonbrys.kotson:kotson (1.3.1) +8 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.13.1514)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.13.1514 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.github.salomonbrys.kodein:kodein 1.4.0 - com.github.salomonbrys.kotson:kotson 1.3.1...

com.vinumeris:crashfx-web (1.0), org.jetbrains.kotlin:kdoc (0.9.206) +5 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.9.206)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.9.206 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.vinumeris:crashfx-web 1.0 - org.jetbrains.kotlin:kdoc 0.9.206 -...

com.fasterxml.jackson.module:jackson-module-kotlin (2.5.3), com.github.salomonbrys.kodein:kodein (>=1.0, <=1.1) +10 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.11.91.1)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.11.91.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.fasterxml.jackson.module:jackson-module-kotlin 2.5.3 -...

co.paralleluniverse:quasar-kotlin (>=0.7.1, <=0.7.3), com.github.andrewoma.kwery:core (0.2) +14 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.12.613)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.12.613 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - co.paralleluniverse:quasar-kotlin =0.7.1, =0.2.0, =0.2.0, =0.3.0 -...

com.github.salomonbrys.kodein:kodein (>=2.0.0, <=2.1.1), com.github.salomonbrys.kodein:kodein-android (>=2.0.0, <=2.1.1) +45 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.14.451)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.14.451 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.github.salomonbrys.kodein:kodein =2.0.0, =2.0.0, =0.7.1, =0.7.1, =0.7.1, =0.7.1,...

com.github.mhshams:kotlin-quickstart-archetype (0.0.6), org.jetbrains.kotlin:kdoc (0.6.350) +4 more potentially affected by CVE-2022-24329 via org.jetbrains.kotlin:kotlin-stdlib (0.6.350)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.6.350 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - com.github.mhshams:kotlin-quickstart-archetype 0.0.6 - org.jetbrains.kotlin:kdoc 0.6.350 ...