[teiid-issues] [JBoss JIRA] (TEIID-5823) CVE's in jboss-fuse/teiid

[Van Halbert (Jira)]

     [ https://issues.jboss.org/browse/TEIID-5823?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Van Halbert moved ENTESB-11967 to TEIID-5823:
---------------------------------------------

              Project: Teiid  (was: Red Hat Fuse)
                  Key: TEIID-5823  (was: ENTESB-11967)
           Issue Type: Quality Risk  (was: Bug)
             Workflow: classic default workflow  (was: ENTESB Triaged Work)
          Component/s: Build/Kits
                           (was: Data Integration)
    Affects Version/s: 13.x
                       12.3.1
                           (was: fuse-7.5-ER1)


> CVE's in jboss-fuse/teiid
> -------------------------
>
>                 Key: TEIID-5823
>                 URL: https://issues.jboss.org/browse/TEIID-5823
>             Project: Teiid
>          Issue Type: Quality Risk
>          Components: Build/Kits
>    Affects Versions: 13.x, 12.3.1
>            Reporter: Van Halbert
>            Assignee: Van Halbert
>            Priority: Blocker
>
> *Branch/Tag*: 12.3.1.fuse-750011-redhat-00001
> * *Severity*: {color:#f9423a}High{color}
> 1.  apache commons collections
> *  Vulnerability ID: CVE-2015-6420
> 2.  org.apache.lucene:lucene-queryparser - Remote Code Execution (RCE)
> * Vulnerability ID: CVE-2017-12629
> 3.  org.slf4j:slf4j-ext - Access Restriction Bypass
> *  Vulnerability ID: CVE-2018-8088



--
This message was sent by Atlassian Jira
(v7.13.8#713008)