Security Bulletin: Vulnerabilities of JCommander and TestNG have affected APM WebLogic and APM JBoss Agents.

Summary APM WebLogic and APM JBoss agents are vulnerable to JCommander and TestNG as described in 221124, CVE-2022-4065. The fix includes removing the required libraries from the installed path Vulnerability Details CVEID:CVE-2022-4065 DESCRIPTION: cbeust testing could allow a remote authenticate...

Fedora: Security Advisory for beust-jcommander (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: beust-jcommander-1.82-9.fc40

JCommander is a very small Java framework that makes it trivial to parse command line parameters with annotations...

Security Bulletin: IBM OpenPages for IBM Cloud Pak for Data is Vulnerable to JCommander [X-Force ID: 221124]

Summary There is a vulnerability in the JCommander open source library used by IBM OpenPages for IBM Cloud Pak for Data. This vulnerability has been addressed. X-Force ID: 221124 Vulnerability Details IBM X-Force ID: 221124 DESCRIPTION: JCommander could allow a remote attacker to obtain sensitive...

AZL-57076 CVE-2022-48285 affecting package beust-jcommander 2.0-1

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive...

Man-in-the-Middle (MitM)

jcommander is vulnerable to man-in-the-middle attacks. The usage of an insecure HTTP channel during build allows an attacker to intercept and modify network traffic and introduce malicious code into the third-party component...

Unsafe Dependency Resolution

Overview com.beust:jcommander is a Command line parsing framework for Java. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the build occurred over an insecure connection, a malicious user could have...