Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component.
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.2. When the CoAP consumer could not build its response once the route had completed, CamelCoapResource caught the resulting exception and sent its message back to the CoAP client as the payload of a 5.00 Internal Server Error response. The typical case is a type conversion failure: the consumer converts the final message body to the byte[] payload, and the CamelCoapMaxAge and CamelCoapETag headers to their types, after the route has returned, and therefore outside the route's error handler. On the affecte
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Apache Software Foundation
- Product
- Apache Camel
- CVSS v3.1
- 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Fix
- not yet available
- Weakness
- CWE-209
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 10 (Routine)
- CVSS v3.1 5.3 medium
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.