CVE-2024-7885: build of apache camel - hawtio Version not applicable in the source CPE; +31 more affected products

Affected technology

build of apache camel - hawtio · Version not applicable in the source CPE
redhat

build of apache camel for spring boot · Version not applicable in the source CPE
redhat

build of keycloak · Version not applicable in the source CPE
redhat

data grid · 8.0.0
redhat

integration camel k · Version not applicable in the source CPE
redhat

jboss enterprise application platform · 7.0.0
redhat

jboss enterprise application platform · 8.0.0
redhat

jboss fuse · 7.0.0
redhat

process automation · 7.0
redhat

single sign-on · 7.0
redhat

Product not specified by the source · 0 to before 2.2.36.Final, 2.3.0.Alpha1 to before 2.3.17.Final
Vendor not specified by the source

HawtIO 4.0.0 for Red Hat build of Apache Camel 4 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel 3.20.7 for Spring Boot · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel 4.4.2 for Spring Boot · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel for Spring Boot 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel - HawtIO 4 · Exact affected versions not specified by the source
Red Hat

Red Hat Build of Keycloak · Exact affected versions not specified by the source
Red Hat

Red Hat build of Quarkus · Exact affected versions not specified by the source
Red Hat

Red Hat Data Grid 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Fuse 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel K 1 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Data Grid 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform Expansion Pack · Exact affected versions not specified by the source
Red Hat

Red Hat Process Automation 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.