{"action":"Upgrade org.apache.derby:derby to 10.1.2.1 or later.","affected":[{"fixed":"10.1.2.1","introduced":"0"}],"component":"org.apache.derby:derby","cve_ids":["CVE-2005-4849"],"ecosystem":"Maven","epss":0.02451,"exploited":false,"fixed_versions":["10.1.2.1"],"ghsa_id":"GHSA-rp7r-79rm-2758","id":"tcs_01M5N9C62F3C3VA1Z6ZSCXFX41","modified_at":"2024-11-30T05:24:31.837911Z","published_at":"2022-05-01T02:31:27Z","references":["https://osv.dev/vulnerability/GHSA-rp7r-79rm-2758","https://nvd.nist.gov/vuln/detail/CVE-2005-4849","https://github.com/apache/derby/commit/09a7325f75a4f96a7735e46c9723930f88ea2613","https://github.com/apache/derby/commit/82d721fd53e30dbb86d6d742c085030985091968","https://github.com/apache/derby/commit/fd24a7590ff5426bac68303fbeca07dbc5067412","https://github.com/apache/derby","http://db.apache.org/derby/releases/release-10.1.2.1.html","http://issues.apache.org/jira/browse/DERBY-530","http://issues.apache.org/jira/browse/DERBY-559","http://svn.apache.org/viewvc?view=revision&revision=289672"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rp7r-79rm-2758","url":"https://osv.dev/vulnerability/GHSA-rp7r-79rm-2758"}],"summary":"Apache Derby exposes user and password attributes"}