CVE-2020-11971
Fixed in a distro release EPSS 14%
Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.
Products: apache camel, oracle communications_diameter_intelligence_hub, oracle communications_diameter_signaling_router, oracle enterprise_manager_base_platform, oracle flexcube_private_banking
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.camel:camel | 3.2.0 |
| Maven | org.apache.camel:camel-core | 3.2.0 |
| Maven | org.apache.camel:camel-management | 3.2.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | apache-activemq-5.19 | no fix |
| Chainguard | apache-activemq-fips-5.19 | no fix |
| Chainguard | geoserver-2.27-community | 2.27.5-r2 |
| Chainguard | geoserver-2.28-community | 2.28.2-r3 |