[FP]: wildfly for CVE-2022-1278

[githubuserVenkat]

Package URl

pkg:maven/org.jboss.activemq.artemis.integration/[email protected]

CPE

cpe:2.3:a:redhat:wildfly::::::::

CVE

CVE-2022-1278

ODC Integration

None

ODC Version

9.0.5

Description

Actual vulnerable component wildfly-microprofile-health-smallrye-16.0.0.Final.jar

Since #6404 was failed to evaluate, please consider this ticket

more jars were reported with same vulnerability for below mentioned Package URIs too
pkg:maven/org.keycloak/[email protected]
pkg:maven/org.wildfly.core/[email protected]
pkg:maven/org.wildfly.core/[email protected]

[github-actions]

Maven Coordinates

<dependency>
   <groupId>org.jboss.activemq.artemis.integration</groupId>
   <artifactId>artemis-wildfly-integration</artifactId>
   <version>1.0.2</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6409
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/org\.jboss\.activemq\.artemis\.integration/artemis-wildfly-integration@.*$</packageUrl>
   <cpe>cpe:/a:redhat:wildfly</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/7580381787

[aikebah]

Resolved with #6408