Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.jgroups/jgroups@3.2.10.Final
Typemaven
Namespaceorg.jgroups
Namejgroups
Version3.2.10.Final
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.3.3.Final
Latest_non_vulnerable_version4.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-s3zg-vjk7-kkdg
vulnerability_id VCID-s3zg-vjk7-kkdg
summary
Authentication via cached credentials
The `DiagnosticsHandler` in this package allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
references
0
reference_url https://bugzilla.redhat.com/CVE-2013-4112
reference_id CVE-2013-4112
reference_type
scores
url https://bugzilla.redhat.com/CVE-2013-4112
fixed_packages
0
url pkg:maven/org.jgroups/jgroups@3.2.10.Final
purl pkg:maven/org.jgroups/jgroups@3.2.10.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jgroups/jgroups@3.2.10.Final
1
url pkg:maven/org.jgroups/jgroups@3.3.3.Final
purl pkg:maven/org.jgroups/jgroups@3.3.3.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jgroups/jgroups@3.3.3.Final
aliases CVE-2013-4112
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s3zg-vjk7-kkdg
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.jgroups/jgroups@3.2.10.Final