Skip to content
OpenAdvisories
High WID-SEC-2022-2264 3 CVEs

SOS GmbH JobScheduler: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Dec 7, 2022 · Updated Dec 7, 2022 · de-DE

Vendor: SOS Product: GmbH JobScheduler < 1.13.17

Summary

Ein Angreifer kann mehrere Schwachstellen in SOS GmbH JobScheduler ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Der JobScheduler ist eine Open-Source-Lösung für die Prozessautomatisierung auf Unternehmensebene.

Vulnerabilities 3

  • High 7.5
    CVE-2022-40153 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • Medium 6.5
    CVE-2021-37533

    Apache Commons Net's FTP client trusts the host from PASV response by default

    Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…

    Apache Software Foundation Apache Commons Net druid libcommons-net-java Debian Ubuntu Wolfi Maven
  • Medium 4.7
    CVE-2022-41946

    TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc

    pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file if the InputStream is larger th…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Maven

Revision history

  1. #1

    Initiale Fassung

References