漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Karaf: Decanter log-socket collector has deserialization vulnerability
Vulnerability Description
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to deserialization of untrusted data, eventually causing DoS. NB: Decanter log socket collector is not installed by default. Users who have not installed Decanter log socket are not impacted by this issue. This issue affects Apache Karaf Decanter before 2.12.0. Users are recommended to upgrade to version 2.12.0, which fixes the issue.
CVSS Information
N/A
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Apache Karaf Decanter 安全漏洞
Vulnerability Description
Apache Karaf Decanter是Apache基金会的一个监控和告警模块。 Apache Karaf Decanter 2.12.0之前版本存在安全漏洞，该漏洞源于log socket collector存在不可信数据反序列化，可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A