CVE-2021-44906: Critical severity IBM QRadar Data Synchronization App vulnerability

Published Mar 10, 2022
·
Updated

Affected versions of minimist ( <=1.2.5 ) are vulnerable to Prototype Pollution. The library could be tricked into adding or modifying properties of Object.prototype using a constructor or proto payload.

Other sources

An Uncontrolled Resource Consumption flaw was found in minimist. This flaw allows an attacker to trick the library into adding or modifying the properties of Object.prototype, using a constructor or proto payload, resulting in prototype pollution and loss of confidentiality, availability, and integrity.

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Minimist prior to 1.2.6 and 0.2.4 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

— GitHub

Node.js Minimist module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution in setKey() function in the index.js script. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

— IBM

Affected Software

201 affected componentsFixes available
redhat/nodejs<1:16.18.1-3.el9_1
1:16.18.1-3.el9_1
redhat/nodejs-nodemon<0:2.0.20-2.el9_1
0:2.0.20-2.el9_1
redhat/eap7-hal-console<0:3.3.13-1.Final_redhat_00001.1.el8ea
0:3.3.13-1.Final_redhat_00001.1.el8ea
redhat/eap7<0:1-18.el9ea
0:1-18.el9ea
redhat/eap7-activemq-artemis<0:2.16.0-9.redhat_00042.1.el9ea
0:2.16.0-9.redhat_00042.1.el9ea
redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el9ea
1:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-aesh-extensions<0:1.8.0-1.redhat_00001.1.el9ea
0:1.8.0-1.redhat_00001.1.el9ea
redhat/eap7-aesh-readline<0:2.2.0-1.redhat_00001.1.el9ea
0:2.2.0-1.redhat_00001.1.el9ea
redhat/eap7-agroal<0:1.3.0-1.redhat_00001.1.el9ea
0:1.3.0-1.redhat_00001.1.el9ea
redhat/eap7-antlr<0:2.7.7-54.redhat_7.1.el9ea
0:2.7.7-54.redhat_7.1.el9ea
redhat/eap7-apache-commons-beanutils<0:1.9.4-1.redhat_00002.1.el9ea
0:1.9.4-1.redhat_00002.1.el9ea
redhat/eap7-apache-commons-cli<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-codec<0:1.15.0-1.redhat_00001.1.el9ea
0:1.15.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-collections<0:3.2.2-9.redhat_2.1.el9ea
0:3.2.2-9.redhat_2.1.el9ea
redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el9ea
0:2.10.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang<0:3.11.0-1.redhat_00001.1.el9ea
0:3.11.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang2<0:2.6.0-1.redhat_7.1.el9ea
0:2.6.0-1.redhat_7.1.el9ea
redhat/eap7-apache-cxf<0:3.3.13-1.redhat_00001.1.el9ea
0:3.3.13-1.redhat_00001.1.el9ea
redhat/eap7-apache-cxf-xjc-utils<0:3.3.1-1.1.redhat_00001.1.el9ea
0:3.3.1-1.1.redhat_00001.1.el9ea
redhat/eap7-apache-mime4j<0:0.6.0-4.1.redhat_7.1.el9ea
0:0.6.0-4.1.redhat_7.1.el9ea
redhat/eap7-apache-sshd<0:2.7.0-1.redhat_00001.1.el9ea
0:2.7.0-1.redhat_00001.1.el9ea
redhat/eap7-artemis-native<1:1.0.2-3.redhat_1.el9ea
1:1.0.2-3.redhat_1.el9ea
redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el9ea
0:1.0.4-1.redhat_00001.1.el9ea
redhat/eap7-atinject<0:1.0.3-1.redhat_00001.1.el9ea
0:1.0.3-1.redhat_00001.1.el9ea
redhat/eap7-avro<0:1.7.6-7.1.redhat_2.1.el9ea
0:1.7.6-7.1.redhat_2.1.el9ea
redhat/eap7-azure-storage<0:8.6.6-1.1.redhat_00001.1.el9ea
0:8.6.6-1.1.redhat_00001.1.el9ea
redhat/eap7-bouncycastle<0:1.68.0-2.redhat_00005.1.el9ea
0:1.68.0-2.redhat_00005.1.el9ea
redhat/eap7-byte-buddy<0:1.11.12-2.redhat_00002.1.el9ea
0:1.11.12-2.redhat_00002.1.el9ea
redhat/eap7-caffeine<0:2.8.8-1.redhat_00001.1.el9ea
0:2.8.8-1.redhat_00001.1.el9ea
redhat/eap7-cal10n<0:0.8.1-6.redhat_1.1.el9ea
0:0.8.1-6.redhat_1.1.el9ea
redhat/eap7-codehaus-jackson<0:1.9.13-10.redhat_00007.1.el9ea
0:1.9.13-10.redhat_00007.1.el9ea
redhat/eap7-commons-logging-jboss-logging<0:1.0.0-1.Final_redhat_1.1.el9ea
0:1.0.0-1.Final_redhat_1.1.el9ea
redhat/eap7-cryptacular<0:1.2.4-1.redhat_00001.1.el9ea
0:1.2.4-1.redhat_00001.1.el9ea
redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el9ea
0:2.1.3-1.redhat_00001.1.el9ea
redhat/eap7-ecj<1:3.26.0-1.redhat_00002.1.el9ea
1:3.26.0-1.redhat_00002.1.el9ea
redhat/eap7-eclipse-jgit<0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
redhat/eap7-elytron-web<0:1.9.2-2.Final_redhat_00001.1.el9ea
0:1.9.2-2.Final_redhat_00001.1.el9ea
redhat/eap7-fge-btf<0:1.2.0-1.redhat_00007.1.el9ea
0:1.2.0-1.redhat_00007.1.el9ea
redhat/eap7-fge-msg-simple<0:1.1.0-1.redhat_00007.1.el9ea
0:1.1.0-1.redhat_00007.1.el9ea
redhat/eap7-glassfish-concurrent<0:1.1.1-1.redhat_00001.1.el9ea
0:1.1.1-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-fastinfoset<0:1.2.13-11.1.redhat_1.1.el9ea
0:1.2.13-11.1.redhat_1.1.el9ea
redhat/eap7-glassfish-jaf<0:1.2.2-1.redhat_00001.1.el9ea
0:1.2.2-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-javamail<0:1.6.5-1.redhat_00001.1.el9ea
0:1.6.5-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-jaxb<0:2.3.3-4.1.b02_redhat_00001.1.el9ea
0:2.3.3-4.1.b02_redhat_00001.1.el9ea
redhat/eap7-glassfish-jsf<0:2.3.14-4.SP05_redhat_00001.1.el9ea
0:2.3.14-4.SP05_redhat_00001.1.el9ea
redhat/eap7-glassfish-json<0:1.1.6-2.redhat_00001.1.el9ea
0:1.1.6-2.redhat_00001.1.el9ea
redhat/eap7-gnu-getopt<0:1.0.13-6.redhat_5.1.el9ea
0:1.0.13-6.redhat_5.1.el9ea
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el9ea
0:2.8.9-1.redhat_00001.1.el9ea
redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el9ea
0:1.0.1-1.redhat_00002.1.el9ea
redhat/eap7-guava-libraries<0:30.1.0-1.1.redhat_00001.1.el9ea
0:30.1.0-1.1.redhat_00001.1.el9ea
redhat/eap7-h2database<0:1.4.197-2.redhat_00004.1.el9ea
0:1.4.197-2.redhat_00004.1.el9ea
redhat/eap7-hal-console<0:3.3.13-1.Final_redhat_00001.1.el9ea
0:3.3.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate<0:5.3.27-1.Final_redhat_00001.1.el9ea
0:5.3.27-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-beanvalidation-api<0:2.0.2-1.redhat_00001.1.el9ea
0:2.0.2-1.redhat_00001.1.el9ea
redhat/eap7-hibernate-commons-annotations<0:5.0.5-1.1.Final_redhat_00002.1.el9ea
0:5.0.5-1.1.Final_redhat_00002.1.el9ea
redhat/eap7-hibernate-search<0:5.10.7-1.1.Final_redhat_00001.1.el9ea
0:5.10.7-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-validator<0:6.0.23-1.Final_redhat_00001.1.el9ea
0:6.0.23-1.Final_redhat_00001.1.el9ea
redhat/eap7-hornetq<0:2.4.8-1.Final_redhat_00001.1.el9ea
0:2.4.8-1.Final_redhat_00001.1.el9ea
redhat/eap7-httpcomponents-asyncclient<0:4.1.4-1.1.redhat_00001.1.el9ea
0:4.1.4-1.1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el9ea
0:4.5.13-1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-core<0:4.4.14-1.redhat_00001.1.el9ea
0:4.4.14-1.redhat_00001.1.el9ea
redhat/eap7-infinispan<0:11.0.15-1.Final_redhat_00001.1.el9ea
0:11.0.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-ironjacamar<0:1.5.3-2.SP1_redhat_00001.1.el9ea
0:1.5.3-2.SP1_redhat_00001.1.el9ea
redhat/eap7-jackson-annotations<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-core<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-coreutils<0:1.8.0-1.redhat_00002.1.el9ea
0:1.8.0-1.redhat_00002.1.el9ea
redhat/eap7-jackson-databind<0:2.12.6.1-2.redhat_00004.1.el9ea
0:2.12.6.1-2.redhat_00004.1.el9ea
redhat/eap7-jackson-jaxrs-providers<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-base<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-java8<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jakarta-el<0:3.0.3-3.redhat_00007.1.el9ea
0:3.0.3-3.redhat_00007.1.el9ea
redhat/eap7-jakarta-security-enterprise-api<0:1.0.2-3.redhat_00001.1.el9ea
0:1.0.2-3.redhat_00001.1.el9ea
redhat/eap7-jandex<0:2.4.2-1.Final_redhat_00001.1.el9ea
0:2.4.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jansi<0:1.18.0-1.redhat_00001.1.el9ea
0:1.18.0-1.redhat_00001.1.el9ea
redhat/eap7-jasypt<0:1.9.3-1.redhat_00002.1.el9ea
0:1.9.3-1.redhat_00002.1.el9ea
redhat/eap7-java-classmate<0:1.5.1-1.redhat_00001.1.el9ea
0:1.5.1-1.redhat_00001.1.el9ea
redhat/eap7-javaee-jpa-spec<0:2.2.3-1.redhat_00001.1.el9ea
0:2.2.3-1.redhat_00001.1.el9ea
redhat/eap7-javaee-security-soteria<0:1.0.1-3.redhat_00002.1.el9ea
0:1.0.1-3.redhat_00002.1.el9ea
redhat/eap7-javaewah<0:1.1.7-1.redhat_00001.1.el9ea
0:1.1.7-1.redhat_00001.1.el9ea
redhat/eap7-javapackages-tools<0:3.4.1-5.15.6.el9ea
0:3.4.1-5.15.6.el9ea
redhat/eap7-javassist<0:3.27.0-2.GA_redhat_00001.1.el9ea
0:3.27.0-2.GA_redhat_00001.1.el9ea
redhat/eap7-jaxbintros<0:1.0.3-1.GA_redhat_00001.1.el9ea
0:1.0.3-1.GA_redhat_00001.1.el9ea
redhat/eap7-jaxen<0:1.1.6-14.redhat_2.1.el9ea
0:1.1.6-14.redhat_2.1.el9ea
redhat/eap7-jberet<0:1.3.9-2.SP2_redhat_00001.1.el9ea
0:1.3.9-2.SP2_redhat_00001.1.el9ea
redhat/eap7-jboss-aesh<0:2.4.0-1.redhat_00001.1.el9ea
0:2.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jboss-classfilewriter<0:1.2.5-1.Final_redhat_00001.1.el9ea
0:1.2.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-common-beans<0:2.0.1-1.Final_redhat_00001.1.el9ea
0:2.0.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-dmr<0:1.5.1-1.Final_redhat_00001.1.el9ea
0:1.5.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb3-ext-api<0:2.3.0-1.Final_redhat_00001.1.el9ea
0:2.3.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb-client<0:4.0.44-1.Final_redhat_00001.1.el9ea
0:4.0.44-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-genericjms<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-iiop-client<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jboss-invocation<0:1.6.3-1.Final_redhat_00001.1.el9ea
0:1.6.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logging<0:3.4.1-2.Final_redhat_00001.1.el9ea
0:3.4.1-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logmanager<0:2.1.18-1.Final_redhat_00001.1.el9ea
0:2.1.18-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-marshalling<0:2.0.12-1.1.Final_redhat_00001.1.el9ea
0:2.0.12-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-metadata<0:13.0.0-1.Final_redhat_00001.1.el9ea
0:13.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-modules<0:1.12.0-2.Final_redhat_00001.1.el9ea
0:1.12.0-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-msc<0:1.4.12-1.Final_redhat_00001.1.el9ea
0:1.4.12-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-openjdk-orb<0:8.1.4-3.Final_redhat_00002.1.el9ea
0:8.1.4-3.Final_redhat_00002.1.el9ea
redhat/eap7-jboss-remoting<0:5.0.25-1.SP1_redhat_00001.1.el9ea
0:5.0.25-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jboss-remoting-jmx<0:3.0.4-1.Final_redhat_00001.1.el9ea
0:3.0.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-seam-int<0:7.0.0-6.GA_redhat_2.1.el9ea
0:7.0.0-6.GA_redhat_2.1.el9ea
redhat/eap7-jboss-security-negotiation<0:3.0.6-1.Final_redhat_00001.1.el9ea
0:3.0.6-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-security-xacml<0:2.0.8-17.Final_redhat_8.1.el9ea
0:2.0.8-17.Final_redhat_8.1.el9ea
redhat/eap7-jboss-server-migration<0:1.10.0-18.Final_redhat_00017.1.el9ea
0:1.10.0-18.Final_redhat_00017.1.el9ea
redhat/eap7-jboss-stdio<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-threads<0:2.4.0-1.Final_redhat_00001.1.el9ea
0:2.4.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-transaction-spi<0:7.6.0-2.Final_redhat_1.1.el9ea
0:7.6.0-2.Final_redhat_1.1.el9ea
redhat/eap7-jboss-vfs<0:3.2.16-1.Final_redhat_00001.1.el9ea
0:3.2.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-weld<3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
redhat/eap7-jbossws-api<0:1.1.2-1.Final_redhat_00001.1.el9ea
0:1.1.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common<0:3.3.3-1.Final_redhat_00001.1.el9ea
0:3.3.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common-tools<0:1.3.2-1.Final_redhat_00001.1.el9ea
0:1.3.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-cxf<0:5.4.4-1.Final_redhat_00001.1.el9ea
0:5.4.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-jaxws-undertow-httpspi<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jbossws-spi<0:3.3.1-1.Final_redhat_00001.1.el9ea
0:3.3.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-xnio-base<0:3.8.7-1.SP1_redhat_00001.1.el9ea
0:3.8.7-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jcip-annotations<0:1.0.0-5.redhat_8.1.el9ea
0:1.0.0-5.redhat_8.1.el9ea
redhat/eap7-jctools<0:2.1.2-1.redhat_00003.1.el9ea
0:2.1.2-1.redhat_00003.1.el9ea
redhat/eap7-jettison<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jgroups<0:4.2.15-1.Final_redhat_00001.1.el9ea
0:4.2.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-azure<0:1.3.1-1.1.Final_redhat_00001.1.el9ea
0:1.3.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-kubernetes<0:1.0.16-1.Final_redhat_00001.1.el9ea
0:1.0.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-joda-time<0:2.9.7-2.redhat_1.1.el9ea
0:2.9.7-2.redhat_1.1.el9ea
redhat/eap7-jsonb-spec<0:1.0.2-1.redhat_00001.1.el9ea
0:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-json-patch<0:1.9.0-1.redhat_00002.1.el9ea
0:1.9.0-1.redhat_00002.1.el9ea
redhat/eap7-jsoup<0:1.14.2-1.redhat_00002.1.el9ea
0:1.14.2-1.redhat_00002.1.el9ea
redhat/eap7-jul-to-slf4j-stub<0:1.0.1-7.Final_redhat_3.1.el9ea
0:1.0.1-7.Final_redhat_3.1.el9ea
redhat/eap7-log4j<0:2.17.1-2.redhat_00002.1.el9ea
0:2.17.1-2.redhat_00002.1.el9ea
redhat/eap7-log4j2-jboss-logmanager<0:1.0.0-1.Final_redhat_00001.1.el9ea
0:1.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-log4j-jboss-logmanager<0:1.2.2-1.Final_redhat_00002.1.el9ea
0:1.2.2-1.Final_redhat_00002.1.el9ea
redhat/eap7-lucene-solr<0:5.5.5-3.redhat_2.1.el9ea
0:5.5.5-3.redhat_2.1.el9ea
redhat/eap7-mustache-java<0:0.9.6-1.1.redhat_00001.1.el9ea
0:0.9.6-1.1.redhat_00001.1.el9ea
redhat/eap7-narayana<0:5.11.4-1.Final_redhat_00001.1.el9ea
0:5.11.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-neethi<0:3.1.1-1.1.redhat_1.1.el9ea
0:3.1.1-1.1.redhat_1.1.el9ea
redhat/eap7-netty<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-tcnative<0:2.0.52-1.Final_redhat_00001.1.el9ea
0:2.0.52-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-transport-native-epoll<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-xnio-transport<0:0.1.9-1.Final_redhat_00001.1.el9ea
0:0.1.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-objectweb-asm<0:9.1.0-1.redhat_00002.1.el9ea
0:9.1.0-1.redhat_00002.1.el9ea
redhat/eap7-opensaml<0:3.3.1-1.1.redhat_00002.1.el9ea
0:3.3.1-1.1.redhat_00002.1.el9ea
redhat/eap7-picketbox<0:5.0.3-10.Final_redhat_00009.1.el9ea
0:5.0.3-10.Final_redhat_00009.1.el9ea
redhat/eap7-picketbox-commons<0:1.0.0-4.final_redhat_5.1.el9ea
0:1.0.0-4.final_redhat_5.1.el9ea
redhat/eap7-picketlink-bindings<0:2.5.5-26.SP12_redhat_00014.1.el9ea
0:2.5.5-26.SP12_redhat_00014.1.el9ea
redhat/eap7-picketlink-federation<0:2.5.5-21.SP12_redhat_00011.1.el9ea
0:2.5.5-21.SP12_redhat_00011.1.el9ea
redhat/eap7-protostream<0:4.3.5-1.Final_redhat_00001.1.el9ea
0:4.3.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-reactive-streams<0:1.0.3-2.redhat_00003.1.el9ea
0:1.0.3-2.redhat_00003.1.el9ea
redhat/eap7-reactivex-rxjava<0:3.0.9-1.redhat_00001.1.el9ea
0:3.0.9-1.redhat_00001.1.el9ea
redhat/eap7-reactivex-rxjava2<0:2.2.20-1.redhat_00001.1.el9ea
0:2.2.20-1.redhat_00001.1.el9ea
redhat/eap7-resteasy<0:3.15.3-1.Final_redhat_00001.1.el9ea
0:3.15.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-shibboleth-java-support<0:7.3.0-1.1.redhat_00001.1.el9ea
0:7.3.0-1.1.redhat_00001.1.el9ea
redhat/eap7-slf4j<0:1.7.22-4.1.redhat_2.1.el9ea
0:1.7.22-4.1.redhat_2.1.el9ea
redhat/eap7-slf4j-jboss-logmanager<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-snakeyaml<0:1.29.0-1.redhat_00001.2.el9ea
0:1.29.0-1.redhat_00001.2.el9ea
redhat/eap7-stax2-api<0:4.2.1-1.redhat_00001.1.el9ea
0:4.2.1-1.redhat_00001.1.el9ea
redhat/eap7-stax-ex<0:1.8.3-2.redhat_00002.1.el9ea
0:1.8.3-2.redhat_00002.1.el9ea
redhat/eap7-staxmapper<0:1.3.0-2.Final_redhat_1.1.el9ea
0:1.3.0-2.Final_redhat_1.1.el9ea
redhat/eap7-sun-istack-commons<0:3.0.10-1.1.redhat_00001.1.el9ea
0:3.0.10-1.1.redhat_00001.1.el9ea
redhat/eap7-sun-saaj<1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
redhat/eap7-sun-saaj<1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
redhat/eap7-sun-ws-metadata<2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
redhat/eap7-tomcat-taglibs-standard<0:1.2.6-2.1.RC1_redhat_1.1.el9ea
0:1.2.6-2.1.RC1_redhat_1.1.el9ea
redhat/eap7-undertow<0:2.2.18-2.SP2_redhat_00001.1.el9ea
0:2.2.18-2.SP2_redhat_00001.1.el9ea
redhat/eap7-undertow-jastow<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-undertow-js<0:1.0.2-2.Final_redhat_1.1.el9ea
0:1.0.2-2.Final_redhat_1.1.el9ea
redhat/eap7-vdx<0:1.1.6-2.redhat_1.1.el9ea
0:1.1.6-2.redhat_1.1.el9ea
redhat/eap7-velocity<0:2.3.0-1.redhat_00001.1.el9ea
0:2.3.0-1.redhat_00001.1.el9ea
redhat/eap7-weld-cdi<2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
redhat/eap7-weld-core<0:3.1.6-1.1.Final_redhat_00001.1.el9ea
0:3.1.6-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly<0:7.4.6-5.GA_redhat_00002.1.el9ea
0:7.4.6-5.GA_redhat_00002.1.el9ea
redhat/eap7-wildfly-client-config<0:1.0.1-2.1.Final_redhat_00001.1.el9ea
0:1.0.1-2.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-common<0:1.5.4-1.1.Final_redhat_00001.1.el9ea
0:1.5.4-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-discovery<0:1.2.1-1.1.Final_redhat_00001.1.el9ea
0:1.2.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-elytron<0:1.15.13-1.Final_redhat_00001.1.el9ea
0:1.15.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-http-client<0:1.1.12-1.SP1_redhat_00001.1.el9ea
0:1.1.12-1.SP1_redhat_00001.1.el9ea
redhat/eap7-wildfly-naming-client<0:1.0.14-1.1.Final_redhat_00001.1.el9ea
0:1.0.14-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-openssl<0:2.2.3-1.Final_redhat_00001.1.el9ea
0:2.2.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-transaction-client<0:1.1.15-1.Final_redhat_00001.1.el9ea
0:1.1.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-woodstox-core<0:6.0.3-1.1.redhat_00001.1.el9ea
0:6.0.3-1.1.redhat_00001.1.el9ea
redhat/eap7-wsdl4j<0:1.6.3-13.redhat_2.1.el9ea
0:1.6.3-13.redhat_2.1.el9ea
redhat/eap7-wss4j<0:2.2.7-1.1.redhat_00001.1.el9ea
0:2.2.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xalan-j2<0:2.7.1-36.redhat_00013.1.el9ea
0:2.7.1-36.redhat_00013.1.el9ea
redhat/eap7-xerces-j2<0:2.12.0-3.SP04_redhat_00001.1.el9ea
0:2.12.0-3.SP04_redhat_00001.1.el9ea
redhat/eap7-xml-commons-resolver<0:1.2.0-7.redhat_12.1.el9ea
0:1.2.0-7.redhat_12.1.el9ea
redhat/eap7-xml-security<0:2.1.7-1.1.redhat_00001.1.el9ea
0:2.1.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xom<0:1.3.7-1.redhat_00001.1.el9ea
0:1.3.7-1.redhat_00001.1.el9ea
redhat/eap7-yasson<0:1.0.10-1.redhat_00001.1.el9ea
0:1.0.10-1.redhat_00001.1.el9ea
redhat/eap7-hal-console<0:3.3.13-1.Final_redhat_00001.1.el7ea
0:3.3.13-1.Final_redhat_00001.1.el7ea
redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el7
0:18.0.6-1.redhat_00001.1.el7
redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el8
0:18.0.6-1.redhat_00001.1.el8
redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el9
0:18.0.6-1.redhat_00001.1.el9
redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7
0:12.22.12-2.el7
redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7
0:14.20.1-2.el7
redhat/rh-nodejs14-nodejs<0:14.21.1-3.el7
0:14.21.1-3.el7
redhat/rh-nodejs14-nodejs-nodemon<0:2.0.20-2.el7
0:2.0.20-2.el7
npm/minimist<0.2.4
0.2.4
npm/minimist>=1.0.0<1.2.6
1.2.6
IBM QRadar Data Synchronization App<=1.0 - 3.0.1
substack Minimist Node.js<1.2.6
redhat/minimist<1.2.6
1.2.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/nodejs to a version that resolves this vulnerability.

    Fixed in 1:16.18.1-3.el9_1
  2. Upgrade

    Upgrade redhat/nodejs-nodemon to a version that resolves this vulnerability.

    Fixed in 0:2.0.20-2.el9_1
  3. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.Final_redhat_00001.1.el8ea
  4. Upgrade

    Upgrade redhat/eap7 to a version that resolves this vulnerability.

    Fixed in 0:1-18.el9ea
  5. Upgrade

    Upgrade redhat/eap7-activemq-artemis to a version that resolves this vulnerability.

    Fixed in 0:2.16.0-9.redhat_00042.1.el9ea
  6. Upgrade

    Upgrade redhat/eap7-activemq-artemis-native to a version that resolves this vulnerability.

    Fixed in 1:1.0.2-1.redhat_00001.1.el9ea
  7. Upgrade

    Upgrade redhat/eap7-aesh-extensions to a version that resolves this vulnerability.

    Fixed in 0:1.8.0-1.redhat_00001.1.el9ea
  8. Upgrade

    Upgrade redhat/eap7-aesh-readline to a version that resolves this vulnerability.

    Fixed in 0:2.2.0-1.redhat_00001.1.el9ea
  9. Upgrade

    Upgrade redhat/eap7-agroal to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-1.redhat_00001.1.el9ea
  10. Upgrade

    Upgrade redhat/eap7-antlr to a version that resolves this vulnerability.

    Fixed in 0:2.7.7-54.redhat_7.1.el9ea
  11. Upgrade

    Upgrade redhat/eap7-apache-commons-beanutils to a version that resolves this vulnerability.

    Fixed in 0:1.9.4-1.redhat_00002.1.el9ea
  12. Upgrade

    Upgrade redhat/eap7-apache-commons-cli to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.redhat_00001.1.el9ea
  13. Upgrade

    Upgrade redhat/eap7-apache-commons-codec to a version that resolves this vulnerability.

    Fixed in 0:1.15.0-1.redhat_00001.1.el9ea
  14. Upgrade

    Upgrade redhat/eap7-apache-commons-collections to a version that resolves this vulnerability.

    Fixed in 0:3.2.2-9.redhat_2.1.el9ea
  15. Upgrade

    Upgrade redhat/eap7-apache-commons-io to a version that resolves this vulnerability.

    Fixed in 0:2.10.0-1.redhat_00001.1.el9ea
  16. Upgrade

    Upgrade redhat/eap7-apache-commons-lang to a version that resolves this vulnerability.

    Fixed in 0:3.11.0-1.redhat_00001.1.el9ea
  17. Upgrade

    Upgrade redhat/eap7-apache-commons-lang2 to a version that resolves this vulnerability.

    Fixed in 0:2.6.0-1.redhat_7.1.el9ea
  18. Upgrade

    Upgrade redhat/eap7-apache-cxf to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.redhat_00001.1.el9ea
  19. Upgrade

    Upgrade redhat/eap7-apache-cxf-xjc-utils to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.1.redhat_00001.1.el9ea
  20. Upgrade

    Upgrade redhat/eap7-apache-mime4j to a version that resolves this vulnerability.

    Fixed in 0:0.6.0-4.1.redhat_7.1.el9ea
  21. Upgrade

    Upgrade redhat/eap7-apache-sshd to a version that resolves this vulnerability.

    Fixed in 0:2.7.0-1.redhat_00001.1.el9ea
  22. Upgrade

    Upgrade redhat/eap7-artemis-native to a version that resolves this vulnerability.

    Fixed in 1:1.0.2-3.redhat_1.el9ea
  23. Upgrade

    Upgrade redhat/eap7-artemis-wildfly-integration to a version that resolves this vulnerability.

    Fixed in 0:1.0.4-1.redhat_00001.1.el9ea
  24. Upgrade

    Upgrade redhat/eap7-atinject to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-1.redhat_00001.1.el9ea
  25. Upgrade

    Upgrade redhat/eap7-avro to a version that resolves this vulnerability.

    Fixed in 0:1.7.6-7.1.redhat_2.1.el9ea
  26. Upgrade

    Upgrade redhat/eap7-azure-storage to a version that resolves this vulnerability.

    Fixed in 0:8.6.6-1.1.redhat_00001.1.el9ea
  27. Upgrade

    Upgrade redhat/eap7-bouncycastle to a version that resolves this vulnerability.

    Fixed in 0:1.68.0-2.redhat_00005.1.el9ea
  28. Upgrade

    Upgrade redhat/eap7-byte-buddy to a version that resolves this vulnerability.

    Fixed in 0:1.11.12-2.redhat_00002.1.el9ea
  29. Upgrade

    Upgrade redhat/eap7-caffeine to a version that resolves this vulnerability.

    Fixed in 0:2.8.8-1.redhat_00001.1.el9ea
  30. Upgrade

    Upgrade redhat/eap7-cal10n to a version that resolves this vulnerability.

    Fixed in 0:0.8.1-6.redhat_1.1.el9ea
  31. Upgrade

    Upgrade redhat/eap7-codehaus-jackson to a version that resolves this vulnerability.

    Fixed in 0:1.9.13-10.redhat_00007.1.el9ea
  32. Upgrade

    Upgrade redhat/eap7-commons-logging-jboss-logging to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.Final_redhat_1.1.el9ea
  33. Upgrade

    Upgrade redhat/eap7-cryptacular to a version that resolves this vulnerability.

    Fixed in 0:1.2.4-1.redhat_00001.1.el9ea
  34. Upgrade

    Upgrade redhat/eap7-dom4j to a version that resolves this vulnerability.

    Fixed in 0:2.1.3-1.redhat_00001.1.el9ea
  35. Upgrade

    Upgrade redhat/eap7-ecj to a version that resolves this vulnerability.

    Fixed in 1:3.26.0-1.redhat_00002.1.el9ea
  36. Upgrade

    Upgrade redhat/eap7-eclipse-jgit to a version that resolves this vulnerability.

    Fixed in 0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
  37. Upgrade

    Upgrade redhat/eap7-elytron-web to a version that resolves this vulnerability.

    Fixed in 0:1.9.2-2.Final_redhat_00001.1.el9ea
  38. Upgrade

    Upgrade redhat/eap7-fge-btf to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-1.redhat_00007.1.el9ea
  39. Upgrade

    Upgrade redhat/eap7-fge-msg-simple to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.redhat_00007.1.el9ea
  40. Upgrade

    Upgrade redhat/eap7-glassfish-concurrent to a version that resolves this vulnerability.

    Fixed in 0:1.1.1-1.redhat_00001.1.el9ea
  41. Upgrade

    Upgrade redhat/eap7-glassfish-fastinfoset to a version that resolves this vulnerability.

    Fixed in 0:1.2.13-11.1.redhat_1.1.el9ea
  42. Upgrade

    Upgrade redhat/eap7-glassfish-jaf to a version that resolves this vulnerability.

    Fixed in 0:1.2.2-1.redhat_00001.1.el9ea
  43. Upgrade

    Upgrade redhat/eap7-glassfish-javamail to a version that resolves this vulnerability.

    Fixed in 0:1.6.5-1.redhat_00001.1.el9ea
  44. Upgrade

    Upgrade redhat/eap7-glassfish-jaxb to a version that resolves this vulnerability.

    Fixed in 0:2.3.3-4.1.b02_redhat_00001.1.el9ea
  45. Upgrade

    Upgrade redhat/eap7-glassfish-jsf to a version that resolves this vulnerability.

    Fixed in 0:2.3.14-4.SP05_redhat_00001.1.el9ea
  46. Upgrade

    Upgrade redhat/eap7-glassfish-json to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-2.redhat_00001.1.el9ea
  47. Upgrade

    Upgrade redhat/eap7-gnu-getopt to a version that resolves this vulnerability.

    Fixed in 0:1.0.13-6.redhat_5.1.el9ea
  48. Upgrade

    Upgrade redhat/eap7-gson to a version that resolves this vulnerability.

    Fixed in 0:2.8.9-1.redhat_00001.1.el9ea
  49. Upgrade

    Upgrade redhat/eap7-guava-failureaccess to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-1.redhat_00002.1.el9ea
  50. Upgrade

    Upgrade redhat/eap7-guava-libraries to a version that resolves this vulnerability.

    Fixed in 0:30.1.0-1.1.redhat_00001.1.el9ea
  51. Upgrade

    Upgrade redhat/eap7-h2database to a version that resolves this vulnerability.

    Fixed in 0:1.4.197-2.redhat_00004.1.el9ea
  52. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.Final_redhat_00001.1.el9ea
  53. Upgrade

    Upgrade redhat/eap7-hibernate to a version that resolves this vulnerability.

    Fixed in 0:5.3.27-1.Final_redhat_00001.1.el9ea
  54. Upgrade

    Upgrade redhat/eap7-hibernate-beanvalidation-api to a version that resolves this vulnerability.

    Fixed in 0:2.0.2-1.redhat_00001.1.el9ea
  55. Upgrade

    Upgrade redhat/eap7-hibernate-commons-annotations to a version that resolves this vulnerability.

    Fixed in 0:5.0.5-1.1.Final_redhat_00002.1.el9ea
  56. Upgrade

    Upgrade redhat/eap7-hibernate-search to a version that resolves this vulnerability.

    Fixed in 0:5.10.7-1.1.Final_redhat_00001.1.el9ea
  57. Upgrade

    Upgrade redhat/eap7-hibernate-validator to a version that resolves this vulnerability.

    Fixed in 0:6.0.23-1.Final_redhat_00001.1.el9ea
  58. Upgrade

    Upgrade redhat/eap7-hornetq to a version that resolves this vulnerability.

    Fixed in 0:2.4.8-1.Final_redhat_00001.1.el9ea
  59. Upgrade

    Upgrade redhat/eap7-httpcomponents-asyncclient to a version that resolves this vulnerability.

    Fixed in 0:4.1.4-1.1.redhat_00001.1.el9ea
  60. Upgrade

    Upgrade redhat/eap7-httpcomponents-client to a version that resolves this vulnerability.

    Fixed in 0:4.5.13-1.redhat_00001.1.el9ea
  61. Upgrade

    Upgrade redhat/eap7-httpcomponents-core to a version that resolves this vulnerability.

    Fixed in 0:4.4.14-1.redhat_00001.1.el9ea
  62. Upgrade

    Upgrade redhat/eap7-infinispan to a version that resolves this vulnerability.

    Fixed in 0:11.0.15-1.Final_redhat_00001.1.el9ea
  63. Upgrade

    Upgrade redhat/eap7-ironjacamar to a version that resolves this vulnerability.

    Fixed in 0:1.5.3-2.SP1_redhat_00001.1.el9ea
  64. Upgrade

    Upgrade redhat/eap7-jackson-annotations to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  65. Upgrade

    Upgrade redhat/eap7-jackson-core to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  66. Upgrade

    Upgrade redhat/eap7-jackson-coreutils to a version that resolves this vulnerability.

    Fixed in 0:1.8.0-1.redhat_00002.1.el9ea
  67. Upgrade

    Upgrade redhat/eap7-jackson-databind to a version that resolves this vulnerability.

    Fixed in 0:2.12.6.1-2.redhat_00004.1.el9ea
  68. Upgrade

    Upgrade redhat/eap7-jackson-jaxrs-providers to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  69. Upgrade

    Upgrade redhat/eap7-jackson-modules-base to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  70. Upgrade

    Upgrade redhat/eap7-jackson-modules-java8 to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  71. Upgrade

    Upgrade redhat/eap7-jakarta-el to a version that resolves this vulnerability.

    Fixed in 0:3.0.3-3.redhat_00007.1.el9ea
  72. Upgrade

    Upgrade redhat/eap7-jakarta-security-enterprise-api to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-3.redhat_00001.1.el9ea
  73. Upgrade

    Upgrade redhat/eap7-jandex to a version that resolves this vulnerability.

    Fixed in 0:2.4.2-1.Final_redhat_00001.1.el9ea
  74. Upgrade

    Upgrade redhat/eap7-jansi to a version that resolves this vulnerability.

    Fixed in 0:1.18.0-1.redhat_00001.1.el9ea
  75. Upgrade

    Upgrade redhat/eap7-jasypt to a version that resolves this vulnerability.

    Fixed in 0:1.9.3-1.redhat_00002.1.el9ea
  76. Upgrade

    Upgrade redhat/eap7-java-classmate to a version that resolves this vulnerability.

    Fixed in 0:1.5.1-1.redhat_00001.1.el9ea
  77. Upgrade

    Upgrade redhat/eap7-javaee-jpa-spec to a version that resolves this vulnerability.

    Fixed in 0:2.2.3-1.redhat_00001.1.el9ea
  78. Upgrade

    Upgrade redhat/eap7-javaee-security-soteria to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.redhat_00002.1.el9ea
  79. Upgrade

    Upgrade redhat/eap7-javaewah to a version that resolves this vulnerability.

    Fixed in 0:1.1.7-1.redhat_00001.1.el9ea
  80. Upgrade

    Upgrade redhat/eap7-javapackages-tools to a version that resolves this vulnerability.

    Fixed in 0:3.4.1-5.15.6.el9ea
  81. Upgrade

    Upgrade redhat/eap7-javassist to a version that resolves this vulnerability.

    Fixed in 0:3.27.0-2.GA_redhat_00001.1.el9ea
  82. Upgrade

    Upgrade redhat/eap7-jaxbintros to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-1.GA_redhat_00001.1.el9ea
  83. Upgrade

    Upgrade redhat/eap7-jaxen to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-14.redhat_2.1.el9ea
  84. Upgrade

    Upgrade redhat/eap7-jberet to a version that resolves this vulnerability.

    Fixed in 0:1.3.9-2.SP2_redhat_00001.1.el9ea
  85. Upgrade

    Upgrade redhat/eap7-jboss-aesh to a version that resolves this vulnerability.

    Fixed in 0:2.4.0-1.redhat_00001.1.el9ea
  86. Upgrade

    Upgrade redhat/eap7-jboss-classfilewriter to a version that resolves this vulnerability.

    Fixed in 0:1.2.5-1.Final_redhat_00001.1.el9ea
  87. Upgrade

    Upgrade redhat/eap7-jboss-common-beans to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-1.Final_redhat_00001.1.el9ea
  88. Upgrade

    Upgrade redhat/eap7-jboss-dmr to a version that resolves this vulnerability.

    Fixed in 0:1.5.1-1.Final_redhat_00001.1.el9ea
  89. Upgrade

    Upgrade redhat/eap7-jboss-ejb3-ext-api to a version that resolves this vulnerability.

    Fixed in 0:2.3.0-1.Final_redhat_00001.1.el9ea
  90. Upgrade

    Upgrade redhat/eap7-jboss-ejb-client to a version that resolves this vulnerability.

    Fixed in 0:4.0.44-1.Final_redhat_00001.1.el9ea
  91. Upgrade

    Upgrade redhat/eap7-jboss-genericjms to a version that resolves this vulnerability.

    Fixed in 0:2.0.9-1.Final_redhat_00001.1.el9ea
  92. Upgrade

    Upgrade redhat/eap7-jboss-iiop-client to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.Final_redhat_1.1.el9ea
  93. Upgrade

    Upgrade redhat/eap7-jboss-invocation to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-1.Final_redhat_00001.1.el9ea
  94. Upgrade

    Upgrade redhat/eap7-jboss-logging to a version that resolves this vulnerability.

    Fixed in 0:3.4.1-2.Final_redhat_00001.1.el9ea
  95. Upgrade

    Upgrade redhat/eap7-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:2.1.18-1.Final_redhat_00001.1.el9ea
  96. Upgrade

    Upgrade redhat/eap7-jboss-marshalling to a version that resolves this vulnerability.

    Fixed in 0:2.0.12-1.1.Final_redhat_00001.1.el9ea
  97. Upgrade

    Upgrade redhat/eap7-jboss-metadata to a version that resolves this vulnerability.

    Fixed in 0:13.0.0-1.Final_redhat_00001.1.el9ea
  98. Upgrade

    Upgrade redhat/eap7-jboss-modules to a version that resolves this vulnerability.

    Fixed in 0:1.12.0-2.Final_redhat_00001.1.el9ea
  99. Upgrade

    Upgrade redhat/eap7-jboss-msc to a version that resolves this vulnerability.

    Fixed in 0:1.4.12-1.Final_redhat_00001.1.el9ea
  100. Upgrade

    Upgrade redhat/eap7-jboss-openjdk-orb to a version that resolves this vulnerability.

    Fixed in 0:8.1.4-3.Final_redhat_00002.1.el9ea
  101. Upgrade

    Upgrade redhat/eap7-jboss-remoting to a version that resolves this vulnerability.

    Fixed in 0:5.0.25-1.SP1_redhat_00001.1.el9ea
  102. Upgrade

    Upgrade redhat/eap7-jboss-remoting-jmx to a version that resolves this vulnerability.

    Fixed in 0:3.0.4-1.Final_redhat_00001.1.el9ea
  103. Upgrade

    Upgrade redhat/eap7-jboss-seam-int to a version that resolves this vulnerability.

    Fixed in 0:7.0.0-6.GA_redhat_2.1.el9ea
  104. Upgrade

    Upgrade redhat/eap7-jboss-security-negotiation to a version that resolves this vulnerability.

    Fixed in 0:3.0.6-1.Final_redhat_00001.1.el9ea
  105. Upgrade

    Upgrade redhat/eap7-jboss-security-xacml to a version that resolves this vulnerability.

    Fixed in 0:2.0.8-17.Final_redhat_8.1.el9ea
  106. Upgrade

    Upgrade redhat/eap7-jboss-server-migration to a version that resolves this vulnerability.

    Fixed in 0:1.10.0-18.Final_redhat_00017.1.el9ea
  107. Upgrade

    Upgrade redhat/eap7-jboss-stdio to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.Final_redhat_00001.1.el9ea
  108. Upgrade

    Upgrade redhat/eap7-jboss-threads to a version that resolves this vulnerability.

    Fixed in 0:2.4.0-1.Final_redhat_00001.1.el9ea
  109. Upgrade

    Upgrade redhat/eap7-jboss-transaction-spi to a version that resolves this vulnerability.

    Fixed in 0:7.6.0-2.Final_redhat_1.1.el9ea
  110. Upgrade

    Upgrade redhat/eap7-jboss-vfs to a version that resolves this vulnerability.

    Fixed in 0:3.2.16-1.Final_redhat_00001.1.el9ea
  111. Upgrade

    Upgrade redhat/eap7-jboss-weld to a version that resolves this vulnerability.

    Fixed in 3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
  112. Upgrade

    Upgrade redhat/eap7-jbossws-api to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-1.Final_redhat_00001.1.el9ea
  113. Upgrade

    Upgrade redhat/eap7-jbossws-common to a version that resolves this vulnerability.

    Fixed in 0:3.3.3-1.Final_redhat_00001.1.el9ea
  114. Upgrade

    Upgrade redhat/eap7-jbossws-common-tools to a version that resolves this vulnerability.

    Fixed in 0:1.3.2-1.Final_redhat_00001.1.el9ea
  115. Upgrade

    Upgrade redhat/eap7-jbossws-cxf to a version that resolves this vulnerability.

    Fixed in 0:5.4.4-1.Final_redhat_00001.1.el9ea
  116. Upgrade

    Upgrade redhat/eap7-jbossws-jaxws-undertow-httpspi to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.Final_redhat_1.1.el9ea
  117. Upgrade

    Upgrade redhat/eap7-jbossws-spi to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.Final_redhat_00001.1.el9ea
  118. Upgrade

    Upgrade redhat/eap7-jboss-xnio-base to a version that resolves this vulnerability.

    Fixed in 0:3.8.7-1.SP1_redhat_00001.1.el9ea
  119. Upgrade

    Upgrade redhat/eap7-jcip-annotations to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-5.redhat_8.1.el9ea
  120. Upgrade

    Upgrade redhat/eap7-jctools to a version that resolves this vulnerability.

    Fixed in 0:2.1.2-1.redhat_00003.1.el9ea
  121. Upgrade

    Upgrade redhat/eap7-jettison to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.redhat_00001.1.el9ea
  122. Upgrade

    Upgrade redhat/eap7-jgroups to a version that resolves this vulnerability.

    Fixed in 0:4.2.15-1.Final_redhat_00001.1.el9ea
  123. Upgrade

    Upgrade redhat/eap7-jgroups-azure to a version that resolves this vulnerability.

    Fixed in 0:1.3.1-1.1.Final_redhat_00001.1.el9ea
  124. Upgrade

    Upgrade redhat/eap7-jgroups-kubernetes to a version that resolves this vulnerability.

    Fixed in 0:1.0.16-1.Final_redhat_00001.1.el9ea
  125. Upgrade

    Upgrade redhat/eap7-joda-time to a version that resolves this vulnerability.

    Fixed in 0:2.9.7-2.redhat_1.1.el9ea
  126. Upgrade

    Upgrade redhat/eap7-jsonb-spec to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-1.redhat_00001.1.el9ea
  127. Upgrade

    Upgrade redhat/eap7-json-patch to a version that resolves this vulnerability.

    Fixed in 0:1.9.0-1.redhat_00002.1.el9ea
  128. Upgrade

    Upgrade redhat/eap7-jsoup to a version that resolves this vulnerability.

    Fixed in 0:1.14.2-1.redhat_00002.1.el9ea
  129. Upgrade

    Upgrade redhat/eap7-jul-to-slf4j-stub to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-7.Final_redhat_3.1.el9ea
  130. Upgrade

    Upgrade redhat/eap7-log4j to a version that resolves this vulnerability.

    Fixed in 0:2.17.1-2.redhat_00002.1.el9ea
  131. Upgrade

    Upgrade redhat/eap7-log4j2-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.Final_redhat_00001.1.el9ea
  132. Upgrade

    Upgrade redhat/eap7-log4j-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.2.2-1.Final_redhat_00002.1.el9ea
  133. Upgrade

    Upgrade redhat/eap7-lucene-solr to a version that resolves this vulnerability.

    Fixed in 0:5.5.5-3.redhat_2.1.el9ea
  134. Upgrade

    Upgrade redhat/eap7-mustache-java to a version that resolves this vulnerability.

    Fixed in 0:0.9.6-1.1.redhat_00001.1.el9ea
  135. Upgrade

    Upgrade redhat/eap7-narayana to a version that resolves this vulnerability.

    Fixed in 0:5.11.4-1.Final_redhat_00001.1.el9ea
  136. Upgrade

    Upgrade redhat/eap7-neethi to a version that resolves this vulnerability.

    Fixed in 0:3.1.1-1.1.redhat_1.1.el9ea
  137. Upgrade

    Upgrade redhat/eap7-netty to a version that resolves this vulnerability.

    Fixed in 0:4.1.77-1.Final_redhat_00001.1.el9ea
  138. Upgrade

    Upgrade redhat/eap7-netty-tcnative to a version that resolves this vulnerability.

    Fixed in 0:2.0.52-1.Final_redhat_00001.1.el9ea
  139. Upgrade

    Upgrade redhat/eap7-netty-transport-native-epoll to a version that resolves this vulnerability.

    Fixed in 0:4.1.77-1.Final_redhat_00001.1.el9ea
  140. Upgrade

    Upgrade redhat/eap7-netty-xnio-transport to a version that resolves this vulnerability.

    Fixed in 0:0.1.9-1.Final_redhat_00001.1.el9ea
  141. Upgrade

    Upgrade redhat/eap7-objectweb-asm to a version that resolves this vulnerability.

    Fixed in 0:9.1.0-1.redhat_00002.1.el9ea
  142. Upgrade

    Upgrade redhat/eap7-opensaml to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.1.redhat_00002.1.el9ea
  143. Upgrade

    Upgrade redhat/eap7-picketbox to a version that resolves this vulnerability.

    Fixed in 0:5.0.3-10.Final_redhat_00009.1.el9ea
  144. Upgrade

    Upgrade redhat/eap7-picketbox-commons to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-4.final_redhat_5.1.el9ea
  145. Upgrade

    Upgrade redhat/eap7-picketlink-bindings to a version that resolves this vulnerability.

    Fixed in 0:2.5.5-26.SP12_redhat_00014.1.el9ea
  146. Upgrade

    Upgrade redhat/eap7-picketlink-federation to a version that resolves this vulnerability.

    Fixed in 0:2.5.5-21.SP12_redhat_00011.1.el9ea
  147. Upgrade

    Upgrade redhat/eap7-protostream to a version that resolves this vulnerability.

    Fixed in 0:4.3.5-1.Final_redhat_00001.1.el9ea
  148. Upgrade

    Upgrade redhat/eap7-reactive-streams to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-2.redhat_00003.1.el9ea
  149. Upgrade

    Upgrade redhat/eap7-reactivex-rxjava to a version that resolves this vulnerability.

    Fixed in 0:3.0.9-1.redhat_00001.1.el9ea
  150. Upgrade

    Upgrade redhat/eap7-reactivex-rxjava2 to a version that resolves this vulnerability.

    Fixed in 0:2.2.20-1.redhat_00001.1.el9ea
  151. Upgrade

    Upgrade redhat/eap7-resteasy to a version that resolves this vulnerability.

    Fixed in 0:3.15.3-1.Final_redhat_00001.1.el9ea
  152. Upgrade

    Upgrade redhat/eap7-shibboleth-java-support to a version that resolves this vulnerability.

    Fixed in 0:7.3.0-1.1.redhat_00001.1.el9ea
  153. Upgrade

    Upgrade redhat/eap7-slf4j to a version that resolves this vulnerability.

    Fixed in 0:1.7.22-4.1.redhat_2.1.el9ea
  154. Upgrade

    Upgrade redhat/eap7-slf4j-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.Final_redhat_00001.1.el9ea
  155. Upgrade

    Upgrade redhat/eap7-snakeyaml to a version that resolves this vulnerability.

    Fixed in 0:1.29.0-1.redhat_00001.2.el9ea
  156. Upgrade

    Upgrade redhat/eap7-stax2-api to a version that resolves this vulnerability.

    Fixed in 0:4.2.1-1.redhat_00001.1.el9ea
  157. Upgrade

    Upgrade redhat/eap7-stax-ex to a version that resolves this vulnerability.

    Fixed in 0:1.8.3-2.redhat_00002.1.el9ea
  158. Upgrade

    Upgrade redhat/eap7-staxmapper to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-2.Final_redhat_1.1.el9ea
  159. Upgrade

    Upgrade redhat/eap7-sun-istack-commons to a version that resolves this vulnerability.

    Fixed in 0:3.0.10-1.1.redhat_00001.1.el9ea
  160. Upgrade

    Upgrade redhat/eap7-sun-saaj to a version that resolves this vulnerability.

    Fixed in 1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
  161. Upgrade

    Upgrade redhat/eap7-sun-saaj to a version that resolves this vulnerability.

    Fixed in 1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
  162. Upgrade

    Upgrade redhat/eap7-sun-ws-metadata to a version that resolves this vulnerability.

    Fixed in 2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
  163. Upgrade

    Upgrade redhat/eap7-tomcat-taglibs-standard to a version that resolves this vulnerability.

    Fixed in 0:1.2.6-2.1.RC1_redhat_1.1.el9ea
  164. Upgrade

    Upgrade redhat/eap7-undertow to a version that resolves this vulnerability.

    Fixed in 0:2.2.18-2.SP2_redhat_00001.1.el9ea
  165. Upgrade

    Upgrade redhat/eap7-undertow-jastow to a version that resolves this vulnerability.

    Fixed in 0:2.0.9-1.Final_redhat_00001.1.el9ea
  166. Upgrade

    Upgrade redhat/eap7-undertow-js to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-2.Final_redhat_1.1.el9ea
  167. Upgrade

    Upgrade redhat/eap7-vdx to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-2.redhat_1.1.el9ea
  168. Upgrade

    Upgrade redhat/eap7-velocity to a version that resolves this vulnerability.

    Fixed in 0:2.3.0-1.redhat_00001.1.el9ea
  169. Upgrade

    Upgrade redhat/eap7-weld-cdi to a version that resolves this vulnerability.

    Fixed in 2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
  170. Upgrade

    Upgrade redhat/eap7-weld-core to a version that resolves this vulnerability.

    Fixed in 0:3.1.6-1.1.Final_redhat_00001.1.el9ea
  171. Upgrade

    Upgrade redhat/eap7-wildfly to a version that resolves this vulnerability.

    Fixed in 0:7.4.6-5.GA_redhat_00002.1.el9ea
  172. Upgrade

    Upgrade redhat/eap7-wildfly-client-config to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-2.1.Final_redhat_00001.1.el9ea
  173. Upgrade

    Upgrade redhat/eap7-wildfly-common to a version that resolves this vulnerability.

    Fixed in 0:1.5.4-1.1.Final_redhat_00001.1.el9ea
  174. Upgrade

    Upgrade redhat/eap7-wildfly-discovery to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-1.1.Final_redhat_00001.1.el9ea
  175. Upgrade

    Upgrade redhat/eap7-wildfly-elytron to a version that resolves this vulnerability.

    Fixed in 0:1.15.13-1.Final_redhat_00001.1.el9ea
  176. Upgrade

    Upgrade redhat/eap7-wildfly-http-client to a version that resolves this vulnerability.

    Fixed in 0:1.1.12-1.SP1_redhat_00001.1.el9ea
  177. Upgrade

    Upgrade redhat/eap7-wildfly-naming-client to a version that resolves this vulnerability.

    Fixed in 0:1.0.14-1.1.Final_redhat_00001.1.el9ea
  178. Upgrade

    Upgrade redhat/eap7-wildfly-openssl to a version that resolves this vulnerability.

    Fixed in 0:2.2.3-1.Final_redhat_00001.1.el9ea
  179. Upgrade

    Upgrade redhat/eap7-wildfly-transaction-client to a version that resolves this vulnerability.

    Fixed in 0:1.1.15-1.Final_redhat_00001.1.el9ea
  180. Upgrade

    Upgrade redhat/eap7-woodstox-core to a version that resolves this vulnerability.

    Fixed in 0:6.0.3-1.1.redhat_00001.1.el9ea
  181. Upgrade

    Upgrade redhat/eap7-wsdl4j to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-13.redhat_2.1.el9ea
  182. Upgrade

    Upgrade redhat/eap7-wss4j to a version that resolves this vulnerability.

    Fixed in 0:2.2.7-1.1.redhat_00001.1.el9ea
  183. Upgrade

    Upgrade redhat/eap7-xalan-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.7.1-36.redhat_00013.1.el9ea
  184. Upgrade

    Upgrade redhat/eap7-xerces-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.12.0-3.SP04_redhat_00001.1.el9ea
  185. Upgrade

    Upgrade redhat/eap7-xml-commons-resolver to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-7.redhat_12.1.el9ea
  186. Upgrade

    Upgrade redhat/eap7-xml-security to a version that resolves this vulnerability.

    Fixed in 0:2.1.7-1.1.redhat_00001.1.el9ea
  187. Upgrade

    Upgrade redhat/eap7-xom to a version that resolves this vulnerability.

    Fixed in 0:1.3.7-1.redhat_00001.1.el9ea
  188. Upgrade

    Upgrade redhat/eap7-yasson to a version that resolves this vulnerability.

    Fixed in 0:1.0.10-1.redhat_00001.1.el9ea
  189. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.Final_redhat_00001.1.el7ea
  190. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.6-1.redhat_00001.1.el7
  191. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.6-1.redhat_00001.1.el8
  192. Upgrade

    Upgrade redhat/rh-sso7-keycloak to a version that resolves this vulnerability.

    Fixed in 0:18.0.6-1.redhat_00001.1.el9
  193. Upgrade

    Upgrade redhat/rh-nodejs12-nodejs to a version that resolves this vulnerability.

    Fixed in 0:12.22.12-2.el7
  194. Upgrade

    Upgrade redhat/rh-nodejs14-nodejs to a version that resolves this vulnerability.

    Fixed in 0:14.20.1-2.el7
  195. Upgrade

    Upgrade redhat/rh-nodejs14-nodejs to a version that resolves this vulnerability.

    Fixed in 0:14.21.1-3.el7
  196. Upgrade

    Upgrade redhat/rh-nodejs14-nodejs-nodemon to a version that resolves this vulnerability.

    Fixed in 0:2.0.20-2.el7
  197. Upgrade

    Upgrade npm/minimist to a version that resolves this vulnerability.

    Fixed in 0.2.4
  198. Upgrade

    Upgrade npm/minimist to a version that resolves this vulnerability.

    Fixed in 1.2.6
  199. Upgrade

    Upgrade redhat/minimist to a version that resolves this vulnerability.

    Fixed in 1.2.6
  200. Upgrade

    Upgrade minimist to a version that resolves this vulnerability.

    Fixed in 1.2.6
  201. Upgrade

    Upgrade minimist to a version that resolves this vulnerability.

    Fixed in 0.2.4

Event History

Mar 10, 2022
CVE Published
12:00 AM
Mar 17, 2022
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 18, 2022
Advisory Published
via GitHub·12:01 AM
Mar 19, 2022
Data Sourced
via Red Hat·11:06 PM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2021-44906?

CVE-2021-44906 is classified as a high severity vulnerability as it allows prototype pollution, potentially leading to unexpected behavior or application crashes.

2

How do I fix CVE-2021-44906?

To mitigate CVE-2021-44906, upgrade to minimist version 1.2.6 or later, or implement proper input validation to prevent prototype pollution.

3

What versions of minimist are affected by CVE-2021-44906?

CVE-2021-44906 affects all versions of minimist prior to 1.2.6.

4

What are the consequences of exploiting CVE-2021-44906?

Exploiting CVE-2021-44906 may allow an attacker to manipulate the properties of Object.prototype, leading to security issues and unstable application behavior.

5

Is there any indication of active exploits for CVE-2021-44906?

As of now, there is no public information indicating active exploits targeting CVE-2021-44906, but users are encouraged to apply patches promptly.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203