PT-2023-4144

CVE-2023-34442

Published

2023-07-07

Updated

2023-07-17

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Camel versions 3.X through 3.14.8 Apache Camel versions 3.18.X through 3.18.7 Apache Camel versions 3.20.X through 3.20.5 Apache Camel versions 4.X through 4.0.0-M3

Description The issue is related to the exposure of sensitive information to an unauthorized actor. This vulnerability may allow an attacker to gain unauthorized access to protected information.

Recommendations For Apache Camel versions 3.X through 3.14.8, upgrade to 3.14.9. For Apache Camel versions 3.18.X through 3.18.7, upgrade to 3.18.8. For Apache Camel versions 3.20.X through 3.20.5, upgrade to 3.20.6 or 3.21.0. For Apache Camel versions 4.X through 4.0.0-M3, update to 4.0.0-M1.

Exploitability

Exploit

Fix

Impacts

Researchers

Jonathan Leitschuh

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2023-34442