HIGH7.4
GHSA-8q69-pw39-hpqh
Azure SDK for Java Security Feature Bypass Vulnerability
Quick fix
GHSA-8q69-pw39-hpqh — com.microsoft.azure:azure-eventhubs: upgrade to the fixed version with the command below.
# pom.xml: bump <version>3.2.1</version> for com.microsoft.azure:azure-eventhubsDetails
Azure SDK for Java Security Feature Bypass Vulnerability
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/com.microsoft.azure:azure-eventhubs
Introduced in:
0Fixed in: 3.2.1Fix
# pom.xml: bump <version>3.2.1</version> for com.microsoft.azure:azure-eventhubsMaven/com.azure:azure-core-amqp
Introduced in:
0Fixed in: 1.6.0Fix
# pom.xml: bump <version>1.6.0</version> for com.azure:azure-core-amqpReferences
- https://nvd.nist.gov/vuln/detail/CVE-2020-16971[ADVISORY]
- https://azure.github.io/azure-sdk/releases/2020-10/index.html[WEB]
- https://azure.github.io/azure-sdk/releases/2020-10/java.html[WEB]
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16971[WEB]
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16971[WEB]