{"action":"Upgrade org.jasypt:jasypt to 1.9.2 or later.","affected":[{"fixed":"1.9.2","introduced":"0"}],"component":"org.jasypt:jasypt","cve_ids":["CVE-2014-9970"],"ecosystem":"Maven","epss":0.02366,"exploited":false,"fixed_versions":["1.9.2"],"ghsa_id":"GHSA-r5c2-rxh2-f5h2","id":"tcs_01M5N9B01054DXM3DBMKYPZZZH","modified_at":"2024-02-20T05:28:24.651641Z","published_at":"2022-05-14T03:44:52Z","references":["https://osv.dev/vulnerability/GHSA-r5c2-rxh2-f5h2","https://nvd.nist.gov/vuln/detail/CVE-2014-9970","https://access.redhat.com/errata/RHSA-2017:2546","https://access.redhat.com/errata/RHSA-2017:2547","https://access.redhat.com/errata/RHSA-2017:2808","https://access.redhat.com/errata/RHSA-2017:2809","https://access.redhat.com/errata/RHSA-2017:2810","https://access.redhat.com/errata/RHSA-2017:2811","https://access.redhat.com/errata/RHSA-2017:3141","https://access.redhat.com/errata/RHSA-2018:0294","https://sourceforge.net/p/jasypt/code/668"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r5c2-rxh2-f5h2","url":"https://osv.dev/vulnerability/GHSA-r5c2-rxh2-f5h2"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt"}