Dmaap Security/Vulnerability - Beijing

Repository

Group

Impact Analysis

Action

Repository

Group

Impact Analysis

Action

dmaap-messagerouter-dmaapclient

com.att.nsa

com.att.nsa:dmaapclient is not used in dmaap-messagerouter-dmaapclient

Created the ticket 54030

dmaap-messagerouter-dmaapclient

com.att.nsa

com.att.nsa:dmaapclient is not used in dmaap-messagerouter-dmaapclient

Created the ticket 54030

dmaap-messagerouter-dmaapclient

com.att.nsa

com.att.nsa:dmaapclient is not used in dmaap-messagerouter-dmaapclient

Created the ticket 54030

dmaap-messagerouter-dmaapclient

com.fasterxml.jackson.core

The application is vulnerable by using this component, when default typing is enabled. Message Router do not use the default typing, so using the jackson-databind will not make message router vulnerable

No action

dmaap-messagerouter-messageservice

com.fasterxml.jackson.core

The application is vulnerable by using this component, when default typing is enabled. Message Router do not use the default typing, so using the jackson-databind will not make message router vulnerable

No action

dmaap-messagerouter-msgrtr

com.fasterxml.jackson.core

The application is vulnerable by using this component, when default typing is enabled. Message Router do not use the default typing, so using the jackson-databind will not make message router vulnerable

No action