https://bugzilla.redhat.com/show_bug.cgi?id=1764640
--- Comment #20 from Jonathan Christison <jochrist(a)redhat.com> ---
Marking Red Hat Fuse 7 as having a moderate impact, the use of Apache Commons
Compress as part of Fuse Online is in the Project Generation phase and is not
something made available as part of a service to the network (AV:N -> AV:L),
the naming of the files is also controlled by the local user/developer, an
attacker would need to invest a measurable amount of effort to alter the target
environment to exploit the vulnerability (AC:L -> AC:H)
--
You are receiving this mail because:
You are on the CC list for the bug.