Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-2768 SECCOM - DCAE Vulnerability updates for Istanbul
  3. DCAEGEN2-2810

KPI-MS security vulnerability updates

XMLWordPrintable

      KPI-MS version revision required as noted on last column 

      Status Priority Component name and version Threat level Recommended version Project’s assessment
      OPEN   io.undertow : undertow-core : 2.0.30.Final      As there is 2.2.8.Final available;  will try upgrade to the latest for Istanbul 
      OPEN   org.springframework : spring-web : 5.2.7.RELEASE      5.3.6 RELEASE or 5.3.7 
      OPEN   io.undertow : undertow-servlet : 2.0.30.Final     Select 2.0.34.Final - next version with no policy violation or upgrade to latest 2.2.8.Final
      OPEN   org.apache.httpcomponents : httpclient : 4.5.7      Select 4.5.13: Next version with no policy violation
      OPEN   org.eclipse.jetty : jetty-server : 9.4.17.v20190418     9.4.41.v20210516

       
       

            denilson.l65 denilson.l65
            vv770d vv770d
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: