Skip to content

[Snyk] Security upgrade com.amazonaws:aws-java-sdk-core from 1.12.239 to 1.12.749#449

Open
TheRedHatter wants to merge 1 commit intomasterfrom
snyk-fix-71fc4abbbfd3bd872e2fa01992c2ec4c
Open

[Snyk] Security upgrade com.amazonaws:aws-java-sdk-core from 1.12.239 to 1.12.749#449
TheRedHatter wants to merge 1 commit intomasterfrom
snyk-fix-71fc4abbbfd3bd872e2fa01992c2ec4c

Conversation

@TheRedHatter
Copy link
Copy Markdown
Owner

@TheRedHatter TheRedHatter commented Jun 25, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to fix 61 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

  • api/pacman-api-admin/pom.xml

Vulnerabilities that will be fixed with an upgrade:

Issue Score Upgrade
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664		   780   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
Reachable Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917		   705   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Mature
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015		   675   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Mature
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426		   670   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
Reachable Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585		   630   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884		   563   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity XML External Entity (XXE) Injection
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302		   560   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407		   555   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244		   525   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
high severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329		   525   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424		   520   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
medium severity Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207		   520   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found Proof of Concept
low severity Information Exposure
SNYK-JAVA-COMMONSCODEC-561518		   485   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
Reachable No Known Exploit
medium severity Improper Input Validation
SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058		   415   com.amazonaws:aws-java-sdk-core:
1.12.239 -> 1.12.749
No Path Found No Known Exploit

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data
🦉 XML External Entity (XXE) Injection
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: api/pacman-api-admin/pom.xml to reduce vulnerabilities
e9ae664 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
- https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058
@TheRedHatter
Copy link
Copy Markdown
Owner Author

TheRedHatter commented Jun 25, 2024

Logo
Checkmarx One – Scan Summary & Details – 63cb0eea-3a85-4350-bbe6-dcad8b43a7f2

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM CVE-2023-34050 Maven-org.springframework.amqp:spring-amqp-2.0.5.RELEASE Vulnerable Package
MEDIUM CVE-2024-29857 Maven-org.bouncycastle:bcprov-jdk15on-1.67 Vulnerable Package
MEDIUM CVE-2024-29857 Maven-org.bouncycastle:bcprov-jdk15on-1.56 Vulnerable Package
MEDIUM CVE-2024-30171 Maven-org.bouncycastle:bcprov-jdk15on-1.67 Vulnerable Package
MEDIUM CVE-2024-30171 Maven-org.bouncycastle:bcprov-jdk15on-1.56 Vulnerable Package
MEDIUM CVE-2024-30172 Maven-org.bouncycastle:bcprov-jdk15on-1.56 Vulnerable Package
MEDIUM CVE-2024-30172 Maven-org.bouncycastle:bcprov-jdk15on-1.67 Vulnerable Package
MEDIUM Cleartext_Submission_of_Sensitive_Information /lambda-functions/notification-es-logging-service/src/main/java/com/paladincloud/notification_log/config/AuthManager.java: 44 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /lambda-functions/notification-es-logging-service/src/main/java/com/paladincloud/notification_log/config/AuthManager.java: 44 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-rule-engine-2.0/src/main/java/com/tmobile/pacman/commons/autofix/manager/AuthManager.java: 41 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-aqua-enricher/src/main/java/com/tmobile/cso/pacman/aqua/jobs/AquaDataImporter.java: 37 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-rule-engine-2.0/src/main/java/com/tmobile/pacman/commons/autofix/manager/AuthManager.java: 41 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-rule-engine-2.0/src/main/java/com/tmobile/pacman/commons/autofix/manager/AuthManager.java: 41 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-asset/src/main/java/com/tmobile/pacman/api/asset/service/AssetServiceImpl.java: 856 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-rule-engine-2.0/src/main/java/com/tmobile/pacman/executor/PolicyExecutor.java: 141 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-rule-engine-2.0/src/main/java/com/tmobile/pacman/executor/PolicyExecutor.java: 141 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/auth/GCPCredentialsProvider.java: 281 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 72 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 67 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/auth/GCPCredentialsProvider.java: 281 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 72 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 67 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/service/AmazonCognitoConnector.java: 121 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-vulnerability/src/main/java/com/tmobile/pacman/api/vulnerability/service/VulnerabilityService.java: 973 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/auth/GCPCredentialsProvider.java: 281 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 72 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/azure-discovery/src/main/java/com/tmobile/pacbot/azure/inventory/auth/AzureCredentialProvider.java: 67 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/auth/GCPCredentialsProvider.java: 143 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/auth/GCPCredentialsProvider.java: 144 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 391 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 373 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 391 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 373 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 391 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AssetGroupUtil.java: 373 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /lambda-functions/notification-template-formatter-service/src/main/java/com/paladincloud/HttpUtil.java: 154 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /lambda-functions/notification-send-email-service/src/main/java/com/paladincloud/utils/HttpUtil.java: 152 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/QualysAccountServiceImpl.java: 132 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/QualysAccountServiceImpl.java: 125 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /jobs/pacman-data-shipper/src/main/java/com/tmobile/cso/pacman/datashipper/util/AuthManager.java: 22 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 125 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/TenableAccountServiceImpl.java: 119 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20540 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20540 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20540 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20540 Attack Vector
MEDIUM Client_Potential_XSS /webapp/src/app/shared/searchable-dropdown/searchable-dropdown.component.ts: 142 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21841 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21838 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21831 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21828 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21825 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 21822 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger.js: 63 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20550 Attack Vector
MEDIUM Client_Potential_XSS /commons/pac-api-commons/src/main/resources/docs/v1/js/swagger-ui.js: 20547 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 111 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 106 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 111 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 106 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 111 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 106 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 111 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 106 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/controller/AccountsController.java: 59 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AbstractAccountServiceImpl.java: 89 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AwsAccountServiceImpl.java: 213 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AwsAccountServiceImpl.java: 216 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/QualysAccountServiceImpl.java: 155 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/QualysAccountServiceImpl.java: 158 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 154 Attack Vector
MEDIUM Privacy_Violation /api/pacman-api-admin/src/main/java/com/tmobile/pacman/api/admin/repository/service/AquaAccountServiceImpl.java: 151

More results are available on AST platform

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@TheRedHatter @snyk-bot