CVE-2011-2093 (Medium) detected in blazeds-core-3.2.0.3978.jar - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed - autoclosed

[mend-for-github-com[bot]]

CVE-2011-2093 - Medium Severity Vulnerability

Vulnerable Library - blazeds-core-3.2.0.3978.jar

BlazeDS is the server-based Java remoting and web messaging technology that enables developers to easily connect to back-end distributed data and push data in real-time to Adobe Flex and Adobe AIR applications for more responsive rich Internet application (RIA) experiences.

Library home page: http://opensource.adobe.com/wiki/display/blazeds/BlazeDS/

Path to dependency file: readyapi4j/modules/cucumber/modules/cucumber4oas/pom.xml

Path to vulnerable library: /home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar,/home/wss-scanner/.m2/repository/amf/flex-messaging-core/1.0/flex-messaging-core-1.0.jar

Dependency Hierarchy: - readyapi4j-maven-plugin-1.0.0-SNAPSHOT.jar (Root Library) - readyapi4j-facade-1.0.0-SNAPSHOT.jar - readyapi4j-local-1.0.0-SNAPSHOT.jar - soapui-testserver-api-5.5.0.jar - soapui-5.5.0.jar - :x: **blazeds-core-3.2.0.3978.jar** (Vulnerable Library)

Found in HEAD commit: 2616e3393c26f490cd18ae49306a09616a7b066f

Found in base branch: master

Vulnerability Details

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."

Publish Date: 2011-06-16

URL: CVE-2011-2093

CVSS 2 Score Details (5.0)

Base Score Metrics not available

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.

[mend-for-github-com[bot]]

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.