PT-2023-4144

CVE-2023-34442

Publicado

2023-07-07

Atualizado

2023-07-17

Descrição por

CVSS 3.1

3.3

Baixa

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Camel versions 3.X through 3.14.8 Apache Camel versions 3.18.X through 3.18.7 Apache Camel versions 3.20.X through 3.20.5 Apache Camel versions 4.X through 4.0.0-M3

Description The issue is related to the exposure of sensitive information to an unauthorized actor. This vulnerability may allow an attacker to gain unauthorized access to protected information.

Recommendations For Apache Camel versions 3.X through 3.14.8, upgrade to 3.14.9. For Apache Camel versions 3.18.X through 3.18.7, upgrade to 3.18.8. For Apache Camel versions 3.20.X through 3.20.5, upgrade to 3.20.6 or 3.21.0. For Apache Camel versions 4.X through 4.0.0-M3, update to 4.0.0-M1.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Jonathan Leitschuh

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados

CVE-2023-34442