What is RHSA-2022:4699?

RHSA-2022:4699 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: maven:3.5 security update

Which CVE IDs does RHSA-2022:4699 cover?

RHSA-2022:4699 covers the following CVE IDs: CVE-2022-29599. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:4699?

RHSA-2022:4699 has a CVSS v3 base score of 9.8, published by Red Hat Product Security.

Which products are affected by RHSA-2022:4699?

RHSA-2022:4699 affects 75 products, including: Red Hat Enterprise Linux AppStream E4S (v. 8.1); aopalliance-0:1.0-17.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1); aopalliance-0:1.0-17.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1); apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1); apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1); and others — see the full list on the advisory page.

RHSA-2022:4699HighCVSS 9.8

Red Hat Security Advisory: maven:3.5 security update

Vendor

Red Hat Product Security

Published

May 23, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-29599 →

📋 Description

CVE-2022-29599 — maven-shared-utils: Command injection via Commandline class

🎯 Affected products75

Red Hat Enterprise Linux AppStream E4S (v. 8.1)
aopalliance-0:1.0-17.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
aopalliance-0:1.0-17.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-cli-0:1.4-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-codec-0:1.11-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-io-1:2.6-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-lang3-0:3.7-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-lang3-0:3.7-3.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-logging-0:1.2-13.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
apache-commons-logging-0:1.2-13.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
atinject-0:1-28.20100611svn86.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
atinject-0:1-28.20100611svn86.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
cdi-api-0:1.2-8.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
cdi-api-0:1.2-8.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
geronimo-annotation-0:1.0-23.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
geronimo-annotation-0:1.0-23.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
glassfish-el-0:3.0.1-0.7.b08.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
glassfish-el-api-0:3.0.1-0.7.b08.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
google-guice-0:4.1-11.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
google-guice-0:4.1-11.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
guava20-0:20.0-8.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
guava20-0:20.0-8.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
hawtjni-0:1.16-2.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
hawtjni-runtime-0:1.16-2.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
httpcomponents-client-0:4.5.5-4.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
httpcomponents-client-0:4.5.5-4.module+el8+2452+b359bfcd.src (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
httpcomponents-core-0:4.4.10-3.module+el8+2452+b359bfcd.noarch (maven:3.5) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)
+45 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products75

✅ Remediation

🔗 References (4)