[FP]: Keycloak model Infinispan for CVE-2016-0750

[githubuserVenkat]

Package URl

pkg:maven/org.keycloak/keycloak-model-infinispan@6.0.1

CPE

cpe:2.3:a:infinispan:infinispan:6.0.1:::::::, cpe:2.3:a:keycloak:keycloak:6.0.1:::::::, cpe:2.3:a:redhat:keycloak:6.0.1:::::::*

CVE

CVE-2016-0750

ODC Integration

None

ODC Version

9.0.5

Description

Keycloak 6.0.1 uses Infinispan version 9.4.8 which is not vulnerable to this CVE.

[github-actions]

Maven Coordinates

<dependency>
   <groupId>org.keycloak</groupId>
   <artifactId>keycloak-model-infinispan</artifactId>
   <version>6.0.1</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6367
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/org\.keycloak/keycloak-model-infinispan@.*$</packageUrl>
   <cpe>cpe:/a:infinispan:infinispan</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/7443473144

[aikebah]

approved

[github-actions]

Suppress rule has been added to the generatedSuppressions branch.