{"action":"Upgrade org.apache.knox:gateway-provider-identity-assertion-common to 0.12.0 or later.","affected":[{"fixed":"0.12.0","introduced":"0.2.0"}],"component":"org.apache.knox:gateway-provider-identity-assertion-common","cve_ids":["CVE-2017-5646"],"ecosystem":"Maven","epss":0.00752,"exploited":false,"fixed_versions":["0.12.0"],"ghsa_id":"GHSA-g3fc-8jv4-qmmv","id":"tcs_01M5N8X58Y8VQHWJZ8PV8TZCJE","modified_at":"2025-04-22T20:27:08.885972Z","published_at":"2022-05-13T01:11:15Z","references":["https://osv.dev/vulnerability/GHSA-g3fc-8jv4-qmmv","https://nvd.nist.gov/vuln/detail/CVE-2017-5646","https://github.com/apache/knox/commit/998dcd257dc839c9651485760da4d614c16e2ca2","https://github.com/apache/knox","https://lists.apache.org/thread.html/rcd6bcbcc08840d4e4bea661efe9a5ef8f6126ebbbc5bc266701d8f48@%3Cdev.logging.apache.org%3E","http://mail-archives.apache.org/mod_mbox/knox-user/201705.mbox/%3CCACRbFyjtT7QQGHUzTRdbJoySbJb7tt4BDk5-r-VRn0GB0Kgvag%40mail.gmail.com%3E"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-g3fc-8jv4-qmmv","url":"https://osv.dev/vulnerability/GHSA-g3fc-8jv4-qmmv"}],"summary":"Apache Knox allows impersonation of users"}