Apache Camel 代码问题漏洞

漏洞信息详情

Apache Camel 代码问题漏洞

CNNVD编号：CNNVD-201905-949
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2019-0188
漏洞类型：代码问题
发布时间： 2019-05-22
威胁类型：远程
更新时间： 2021-01-21
厂商：
漏洞来源： Inc.,Takayoshi Is...

漏洞简介

Apache Camel是美国阿帕奇（Apache）软件基金会的一套开源的基于Enterprise Integration Pattern(企业整合模式，简称EIP)的集成框架。该框架提供企业集成模式的Java对象（POJO）的实现，且通过应用程序接口来配置路由和中介的规则。

Apache Camel 2.24.0之前版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://cwiki.apache.org/confluence/display/CAMEL/Camel+2.24.0+Release

参考网址

来源:MLIST

链接:https://lists.apache.org/thread.html/63d1cec8541befeb59dbed23a6b227bdcca7674aa234fb43354dac82@%3Ccommits.tamaya.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E

来源:JVN

链接:http://jvn.jp/en/jp/JVN71498764/index.html

来源:MISC

链接:https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2019/05/24/2

来源:CONFIRM

链接:https://github.com/apache/camel/blob/master/docs/user-manual/en/security-advisories/CVE-2019-0188.txt.asc

来源:MISC

链接:https://www.oracle.com/security-alerts/cpujan2021.html

来源:MLIST

链接:https://lists.apache.org/thread.html/fe74d173689600d9a395d026f0bf5d154c0bf7bd195ecfbc2c987036@%3Cdev.tamaya.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/00118387610522b107cbdcec5369ddd512b576ff0236a02bfca12f44@%3Cusers.camel.apache.org%3E

来源:BID

链接:https://www.securityfocus.com/bid/108422

来源:MLIST

链接:https://lists.apache.org/thread.html/45349f8bd98c1c13a84beddede18fe79b8619ebab99d90f1fb43d7ab@%3Cdev.tamaya.apache.org%3E

来源:BID

链接:http://www.securityfocus.com/bid/108422

来源:MLIST

链接:https://lists.apache.org/thread.html/eed73fc18d4fa3e2341cd0ab101b47f06b16c7efc1cb73791c524c9d@%3Cdev.tamaya.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/61601cda2c5f9832184ea14647b0c0589c94126a460c8eb196be1313@%3Ccommits.tamaya.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/84ba9b79e801a4148dde73d1969cdae0247d11ff63de7ce11b394dc5@%3Ccommits.tamaya.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/6fefbd90f7fb4c8412d85ea3e9e97a4b76b47e206f502c73c29dc0b7@%3Ccommits.tamaya.apache.org%3E

来源:camel.apache.org

链接:http://camel.apache.org/

来源:MISC

链接:https://www.oracle.com/security-alerts/cpujul2020.html

来源:www.oracle.com

链接:https://www.oracle.com/technetwork/security-advisory/cpuoct2019verbose-5072833.html

来源:www.oracle.com

链接:https://www.oracle.com/security-alerts/cpujul2020.html

来源:www.securityfocus.com

链接:http://www.securityfocus.com/bid/108422

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-tivoli-netcool-impact-is-affected-by-an-apache-camel-vulnerability-cve-2019-0188/

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/108422

来源:jvndb.jvn.jp

链接:https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000027.html

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-0188

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletinibm-resilient-soar-is-using-components-with-known-vulnerabilities-apache-camel-cve-2019-0188-cve-2020-11972-cve-2020-11973/

受影响实体

暂无

补丁

Apache Camel 代码问题漏洞的修复措施

正文

Apache Camel 代码问题漏洞

漏洞信息详情