PT-2016-3685 · Apache · Apache Camel

Sim Yih Tsern · Publicado 2016-04-15 · Atualizado 2019-05-24 · CVE-2015-5348

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Camel versions 2.6.x through 2.14.x Apache Camel versions 2.15.x before 2.15.5 Apache Camel versions 2.16.x before 2.16.1

Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request when using camel-jetty or camel-servlet as a consumer in Camel routes.

Recommendations For Apache Camel versions 2.6.x through 2.14.x, update to a version outside of this range to resolve the issue. For Apache Camel versions 2.15.x before 2.15.5, update to version 2.15.5 or later. For Apache Camel versions 2.16.x before 2.16.1, update to version 2.16.1 or later.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2015-5348

GHSA-26V6-W6FW-RH94

Produtos afetados

Apache Camel

Referências · 35

• https://github.com/apache/camel · Nota
• https://github.com/apache/camel/commit/a68434c258cdcd30587ae7adc5dabbac43eadbbf · Nota
• https://github.com/apache/camel/commit/32eacdaff16f8709da55e27b83fa21a16d739f63 · Nota
• https://github.com/apache/camel/commit/190d7c81b7e3ce767514e319630b1bbaf27e6817 · Nota
• https://github.com/apache/camel/commit/c47cffcadabca0c588753555a386942184a33627 · Nota
• https://github.com/apache/camel/commit/c558f30a6d3820faa3d8c4ad5e54448914ec60d0 · Nota
• https://github.com/apache/camel/commit/13e43c1412ad72d99030b4eb4cb72c84fa57d5ff · Nota
• https://github.com/apache/camel/commit/349109b0834764560f0be69eb74f43a16bd220b0 · Nota
• https://github.com/apache/camel/commit/4f065fe07c1dcd7b451e6005a6dc8e96d77da43e · Nota
• https://github.com/apache/camel/commit/515c822148d52de9e7cdf4f6b01f7b793f2f273f · Nota
• https://github.com/apache/camel/commit/d853853469292cd54fd9662c3605030ab5a9566b · Nota
• https://github.com/apache/camel/commit/44e6a3036e5a11d90b60c142cf51ed74b792de31 · Nota
• https://github.com/apache/camel/commit/94330f99acb6f28155793b253de9956c3798f3bb · Nota
• https://github.com/apache/camel/commit/0afcf721ff209eb10a24c5e4b48ca9d6727ea99a · Nota
• https://github.com/apache/camel/commit/9cbd5867fe73ef07ecba6f16d64689632e3f2a16 · Nota