Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all):
- dependency-check version: 10.0.3
- Report Generated On: Sat, 16 Nov 2024 13:43:08 +0100
- Dependencies Scanned: 71 (70 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 5 (show)
- ...
- NVD API Last Checked: 2024-11-16T12:40:45Z
- NVD API Last Modified: 2024-09-18T11:15:10Z
- NVD Cache Last Checked: 2024-11-16T12:40:45Z
- NVD Cache Last Modified: 2024-09-18T11:15:10Z
Summary
Display:
Showing Vulnerable Dependencies (click to show all) Merlia-0.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/a6d457a3b6469de885ef03655d1216936ef43f1b/Merlia-0.jar
MD5: 0cd5423a663f69dd7875b0c82304cc3b
SHA1: a6d457a3b6469de885ef03655d1216936ef43f1b
SHA256:08cbc9ffcc7c98eb772c900ec406f6be93f48ccc819c22ef8522bbc45b326057
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | Merlia-0 | High |
| Vendor | gradle | artifactid | Merlia | Highest |
| Vendor | gradle | groupid | lib | Highest |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | tds | Low |
| Product | file | name | Merlia-0 | High |
| Product | gradle | artifactid | Merlia | Highest |
| Product | jar | package name | tds | Low |
| Version | file | name | Merlia-0 | Medium |
| Version | file | version | 0 | Medium |
| Version | gradle | version | 0 | Highest |
| Version | Manifest | driver-version | 8.13 | Medium |
cowork.calls.zip: bc-fips.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/bc-fips.jar
MD5: 6dbb5bd5f7ba5e2827d845556e85f868
SHA1: 704e65f7e4fe679e5ab2aa8a840f27f8ced4c522
SHA256:50e4c7a0d0c68413d3d8587560d56945ac09e7c89c41bd971cd22d76be6f1085
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | bc-fips | High |
| Vendor | jar | package name | bc | Highest |
| Vendor | jar | package name | bouncycastle | Highest |
| Vendor | jar | package name | bouncycastle | Low |
| Vendor | jar | package name | fips | Highest |
| Vendor | jar | package name | provider | Highest |
| Vendor | Manifest | application-library-allowable-codebase | * | Low |
| Vendor | Manifest | application-name | Bouncy Castle FIPS Provider | Medium |
| Vendor | Manifest | automatic-module-name | org.bouncycastle.fips.core | Medium |
| Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Vendor | Manifest | bundle-symbolicname | bc-fips | Medium |
| Vendor | Manifest | caller-allowable-codebase | * | Low |
| Vendor | Manifest | codebase | * | Low |
| Vendor | Manifest | extension-name | org.bouncycastle.bcfips | Medium |
| Vendor | Manifest | Implementation-Vendor | BouncyCastle.org | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.bouncycastle | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | Manifest | permissions | all-permissions | Low |
| Vendor | Manifest | specification-vendor | BouncyCastle.org | Low |
| Vendor | Manifest | trusted-library | true | Low |
| Product | file | name | bc-fips | High |
| Product | jar | package name | bc | Highest |
| Product | jar | package name | bouncycastle | Highest |
| Product | jar | package name | fips | Highest |
| Product | jar | package name | permissions | Highest |
| Product | jar | package name | provider | Highest |
| Product | Manifest | application-library-allowable-codebase | * | Low |
| Product | Manifest | application-name | Bouncy Castle FIPS Provider | Medium |
| Product | Manifest | automatic-module-name | org.bouncycastle.fips.core | Medium |
| Product | Manifest | Bundle-Name | bc-fips | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Product | Manifest | bundle-symbolicname | bc-fips | Medium |
| Product | Manifest | caller-allowable-codebase | * | Low |
| Product | Manifest | codebase | * | Low |
| Product | Manifest | extension-name | org.bouncycastle.bcfips | Medium |
| Product | Manifest | multi-release | true | Low |
| Product | Manifest | permissions | all-permissions | Low |
| Product | Manifest | trusted-library | true | Low |
| Version | jar | package name | permissions | Highest |
| Version | Manifest | Bundle-Version | 1.0.2.5 | High |
| Version | Manifest | Implementation-Version | 1.0.2.5 | High |
cowork.calls.zip: bcpkix-fips.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/bcpkix-fips.jar
MD5: 5eb817346ccced24509b5b18d49b44e1
SHA1: fe07959721cfa2156be9722ba20fdfee2b5441b0
SHA256:2f6a0e9edf56f815f7771f91e7a099fa2a73642e92345fd05a25ee3a036dc664
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | bcpkix-fips | High |
| Vendor | jar | package name | bouncycastle | Highest |
| Vendor | jar | package name | bouncycastle | Low |
| Vendor | jar | package name | pkix | Highest |
| Vendor | Manifest | application-library-allowable-codebase | * | Low |
| Vendor | Manifest | application-name | Bouncy Castle FIPS PKIX API | Medium |
| Vendor | Manifest | automatic-module-name | org.bouncycastle.fips.pkix | Medium |
| Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Vendor | Manifest | bundle-symbolicname | bcpkix-fips | Medium |
| Vendor | Manifest | caller-allowable-codebase | * | Low |
| Vendor | Manifest | codebase | * | Low |
| Vendor | Manifest | extension-name | org.bouncycastle.bcfips.pkix | Medium |
| Vendor | Manifest | Implementation-Vendor | BouncyCastle.org | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.bouncycastle | Medium |
| Vendor | Manifest | permissions | all-permissions | Low |
| Vendor | Manifest | specification-vendor | BouncyCastle.org | Low |
| Vendor | Manifest | trusted-library | true | Low |
| Product | file | name | bcpkix-fips | High |
| Product | jar | package name | bouncycastle | Highest |
| Product | jar | package name | pkix | Highest |
| Product | Manifest | application-library-allowable-codebase | * | Low |
| Product | Manifest | application-name | Bouncy Castle FIPS PKIX API | Medium |
| Product | Manifest | automatic-module-name | org.bouncycastle.fips.pkix | Medium |
| Product | Manifest | Bundle-Name | bcpkix-fips | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Product | Manifest | bundle-symbolicname | bcpkix-fips | Medium |
| Product | Manifest | caller-allowable-codebase | * | Low |
| Product | Manifest | codebase | * | Low |
| Product | Manifest | extension-name | org.bouncycastle.bcfips.pkix | Medium |
| Product | Manifest | permissions | all-permissions | Low |
| Product | Manifest | trusted-library | true | Low |
| Version | Manifest | Bundle-Version | 1.0.7 | High |
| Version | Manifest | Implementation-Version | 1.0.7 | High |
cowork.calls.zip: bctls-fips.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/bctls-fips.jar
MD5: 4a3abbc764ccf5ecf6d2fc64c0ab66b7
SHA1: b15d650f6e2a9de08d5569e25a642b6a384dbfd2
SHA256:a0bbad2eb5268f1baa08f0e2e69cb61cd292e19e73595c620d586d335d97d1a8
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | bctls-fips | High |
| Vendor | jar | package name | bouncycastle | Highest |
| Vendor | jar | package name | bouncycastle | Low |
| Vendor | jar | package name | org | Highest |
| Vendor | jar | package name | tls | Highest |
| Vendor | Manifest | application-library-allowable-codebase | * | Low |
| Vendor | Manifest | application-name | Bouncy Castle FIPS TLS API | Medium |
| Vendor | Manifest | automatic-module-name | org.bouncycastle.fips.tls | Medium |
| Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Vendor | Manifest | bundle-symbolicname | bctls-fips | Medium |
| Vendor | Manifest | caller-allowable-codebase | * | Low |
| Vendor | Manifest | codebase | * | Low |
| Vendor | Manifest | extension-name | org.bouncycastle.bcfips.tls | Medium |
| Vendor | Manifest | Implementation-Vendor | BouncyCastle.org | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.bouncycastle | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | Manifest | permissions | all-permissions | Low |
| Vendor | Manifest | specification-vendor | BouncyCastle.org | Low |
| Vendor | Manifest | trusted-library | true | Low |
| Product | file | name | bctls-fips | High |
| Product | jar | package name | bouncycastle | Highest |
| Product | jar | package name | org | Highest |
| Product | jar | package name | tls | Highest |
| Product | Manifest | application-library-allowable-codebase | * | Low |
| Product | Manifest | application-name | Bouncy Castle FIPS TLS API | Medium |
| Product | Manifest | automatic-module-name | org.bouncycastle.fips.tls | Medium |
| Product | Manifest | Bundle-Name | bctls-fips | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low |
| Product | Manifest | bundle-symbolicname | bctls-fips | Medium |
| Product | Manifest | caller-allowable-codebase | * | Low |
| Product | Manifest | codebase | * | Low |
| Product | Manifest | extension-name | org.bouncycastle.bcfips.tls | Medium |
| Product | Manifest | multi-release | true | Low |
| Product | Manifest | permissions | all-permissions | Low |
| Product | Manifest | trusted-library | true | Low |
| Version | Manifest | Bundle-Version | 1.0.19 | High |
| Version | Manifest | Implementation-Version | 1.0.19 | High |
cowork.calls.zip: config.jar
Description:
configuration library for JVM languages using HOCON files
License:
https://www.apache.org/licenses/LICENSE-2.0;description=Apache-2.0
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/config.jar
MD5: 1c5702a33999ed337c9b256a4d68eee7
SHA1: b57e0fbdc7270d8ea59c1ba367457a5cc7ba0e98
SHA256:8ada4c185ce72416712d63e0b5afdc5f009c0cdf405e5f26efecdf156aa5dfb6
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | config | High |
| Vendor | jar | package name | config | Highest |
| Vendor | jar | package name | config | Low |
| Vendor | jar | package name | impl | Low |
| Vendor | jar | package name | typesafe | Highest |
| Vendor | jar | package name | typesafe | Low |
| Vendor | Manifest | automatic-module-name | typesafe.config | Medium |
| Vendor | Manifest | bundle-symbolicname | com.typesafe.config | Medium |
| Vendor | Manifest | implementation-url | https://github.com/lightbend/config | Low |
| Vendor | Manifest | Implementation-Vendor | com.typesafe | High |
| Vendor | Manifest | Implementation-Vendor-Id | com.typesafe | Medium |
| Vendor | Manifest | specification-vendor | com.typesafe | Low |
| Product | file | name | config | High |
| Product | jar | package name | config | Highest |
| Product | jar | package name | config | Low |
| Product | jar | package name | impl | Low |
| Product | jar | package name | typesafe | Highest |
| Product | Manifest | automatic-module-name | typesafe.config | Medium |
| Product | Manifest | Bundle-Name | config | Medium |
| Product | Manifest | bundle-symbolicname | com.typesafe.config | Medium |
| Product | Manifest | Implementation-Title | config | High |
| Product | Manifest | implementation-url | https://github.com/lightbend/config | Low |
| Product | Manifest | specification-title | config | Medium |
| Version | jar | package name | config | Highest |
| Version | Manifest | Bundle-Version | 1.4.3 | High |
| Version | Manifest | Implementation-Version | 1.4.3 | High |
cowork.calls.zip: cowork.calls.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/cowork.calls.jar
MD5: 29d6338c362e2e68df85cbe0dc2e2911
SHA1: 606879d6dbcb385b9ba3c132f037deb859bd34e1
SHA256:2f7e4007100f1681a6f86d399e88843a91fde01bea255071872b127786337c18
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | cowork.calls | High |
| Vendor | jar | package name | calls | Low |
| Vendor | jar | package name | cowork | Low |
| Vendor | jar | package name | inet | Low |
| Vendor | Manifest | built-date | 2024-11-16 13:32 | Low |
| Vendor | Manifest | implementation-group | cowork | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | cowork.calls | High |
| Product | jar | package name | calls | Highest |
| Product | jar | package name | calls | Low |
| Product | jar | package name | cowork | Highest |
| Product | jar | package name | cowork | Low |
| Product | jar | package name | server | Low |
| Product | Manifest | built-date | 2024-11-16 13:32 | Low |
| Product | Manifest | implementation-group | cowork | Low |
| Product | Manifest | Implementation-Title | cowork.calls | High |
| Product | Manifest | specification-title | cowork.calls | Medium |
| Version | jar | package name | cowork | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
cowork.calls.zip: cowork.calls.jar: coworkcallsactions.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/cowork.calls.jar/com/inet/cowork/calls/js/coworkcallsactions.js
MD5: 9b4afa642302c31a19015b91b0c72fff
SHA1: 1ce56d9abed97929216b0b5fb3c567d20676affb
SHA256:e51f2e4af927b4c92cf1262d916098804a2dc0691c2318eec535cb5f9220d90d
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.calls.zip: cowork.calls.jar: coworkcallsettings.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/cowork.calls.jar/com/inet/cowork/calls/js/coworkcallsettings.js
MD5: c1a3333b613aadec145360808dcc54bd
SHA1: c616ea88e17ada1c294780f828f583d48af1c46c
SHA256:af641b72434a0b70a4ea4e10f02c53773565e5ece2cea4f5e789d1de1abf5746
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.calls.zip: cowork.calls.jar: coworkcallsfactory.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/cowork.calls.jar/com/inet/cowork/calls/js/coworkcallsfactory.js
MD5: 4d3622a74eda5c874e0df0c33c2e083f
SHA1: a1c55b7ac5123e2f46854aecdf5f245fd2b47596
SHA256:d1aaaa3b3c2c2ba332f3c7ae10ed87364a2edf5d62a53d242156869432733055
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.calls.zip: ice4j.jar
Description:
A Java implementation of the ICE protocol
License:
Apache-2.0: https://github.com/jitsi/ice4j/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/ice4j.jar
MD5: 9b36678cde2576f325cd534c710a260b
SHA1: 4f3978650123e1d0d4218f9233f30a5bbe71a662
SHA256:7e68b3531919ebc577694dd6cb9712b46bde51600a443cacc573e411ba732010
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | ice4j | High |
| Vendor | jar | package name | ice | Highest |
| Vendor | jar | package name | ice4j | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/ice4j | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.ice4j | Medium |
| Vendor | pom | artifactid | ice4j | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | ice4j | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/ice4j | Highest |
| Product | file | name | ice4j | High |
| Product | jar | package name | ice | Highest |
| Product | jar | package name | ice4j | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/ice4j | Low |
| Product | Manifest | Bundle-Name | ice4j | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.ice4j | Medium |
| Product | pom | artifactid | ice4j | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | ice4j | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/ice4j | High |
| Version | pom | version | 3.0-72-g824cd4b | Highest |
cowork.calls.zip: jicoco-config.jar
Description:
Jitsi Common Components (Configuration Utilities)
License:
"Apache-2.0";link="https://github.com/jitsi/jicoco/blob/master/LICENSE"
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jicoco-config.jar
MD5: 4aa7f05db685fb7c9bc175ac6f54b777
SHA1: efe8803db7cb8c04e94aeb20dbc0bb8a5d18e419
SHA256:f8dfdd24730ac88600575b5decf151f91d13726e657d1389a2c56dae6edabb8d
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jicoco-config | High |
| Vendor | jar | package name | config | Highest |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jicoco/jicoco-config | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.config | Medium |
| Vendor | pom | artifactid | jicoco-config | Low |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jicoco-config | High |
| Vendor | pom | parent-artifactid | jicoco-parent | Low |
| Product | file | name | jicoco-config | High |
| Product | jar | package name | config | Highest |
| Product | jar | package name | jitsi | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jicoco/jicoco-config | Low |
| Product | Manifest | Bundle-Name | jicoco-config | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.config | Medium |
| Product | pom | artifactid | jicoco-config | Highest |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jicoco-config | High |
| Product | pom | parent-artifactid | jicoco-parent | Medium |
| Version | pom | version | 1.1-141-g30ec741 | Highest |
cowork.calls.zip: jitsi-metaconfig.jar
Description:
jitsi-metaconfig helps solve the problems around the evolution of configuration properties
License:
Apache-2.0: https://github.com/jitsi/jitsi-metaconfig/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jitsi-metaconfig.jar
MD5: 9a2222e7380ad57b9904e6442ff528d2
SHA1: 1722514941c9ad19186429add7ae6b813cab85ee
SHA256:55e32bfdfe9a0536f39afcf8af201d4ab121edaccd5fdf21cd1a27a63ece3cf0
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jitsi-metaconfig | High |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | jar | package name | metaconfig | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-metaconfig | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.metaconfig | Medium |
| Vendor | pom | artifactid | jitsi-metaconfig | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jitsi-metaconfig | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/jitsi-metaconfig | Highest |
| Product | file | name | jitsi-metaconfig | High |
| Product | jar | package name | jitsi | Highest |
| Product | jar | package name | metaconfig | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-metaconfig | Low |
| Product | Manifest | Bundle-Name | jitsi-metaconfig | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.metaconfig | Medium |
| Product | pom | artifactid | jitsi-metaconfig | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jitsi-metaconfig | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/jitsi-metaconfig | High |
| Version | pom | version | 1.0-12-g02d4bd5 | Highest |
cowork.calls.zip: jitsi-utils.jar
Description:
A set of basic utilities used in Jitsi projects
License:
Apache-2.0: https://github.com/jitsi/jitsi-utils/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jitsi-utils.jar
MD5: 2cd4a7f88a29487ab5d8cc01a4849851
SHA1: ffb5920f6cd784ca7eb6cbd97d533118ffaa0617
SHA256:c653af4010989d8efbf1f561282654be2fda5d2a506796d6cbb7776a16021c1b
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jitsi-utils | High |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | jar | package name | utils | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-utils | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.utils | Medium |
| Vendor | pom | artifactid | jitsi-utils | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jitsi-utils | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/jitsi-utils | Highest |
| Product | file | name | jitsi-utils | High |
| Product | jar | package name | jitsi | Highest |
| Product | jar | package name | utils | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-utils | Low |
| Product | Manifest | Bundle-Name | jitsi-utils | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.utils | Medium |
| Product | pom | artifactid | jitsi-utils | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jitsi-utils | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/jitsi-utils | High |
| Version | pom | version | 1.0-132-g83984af | Highest |
cowork.calls.zip: kotlin-stdlib.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/kotlin-stdlib.jar
MD5: 13af6aba9109c07c47de3e7f344993ca
SHA1: b48df2c4aede9586cc931ead433bc02d6fd7879e
SHA256:240938c4aab8e73e888703e3e7d3f87383ffe5bd536d6d5e3c100d4cd0379fcf
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | kotlin-stdlib | High |
| Vendor | jar | package name | kotlin | Low |
| Vendor | Manifest | Implementation-Vendor | JetBrains | High |
| Vendor | Manifest | kotlin-runtime-component | Main | Low |
| Vendor | Manifest | multi-release | true | Low |
| Product | file | name | kotlin-stdlib | High |
| Product | jar | package name | kotlin | Highest |
| Product | Manifest | Implementation-Title | kotlin-stdlib | High |
| Product | Manifest | kotlin-runtime-component | Main | Low |
| Product | Manifest | multi-release | true | Low |
| Version | Manifest | Implementation-Version | 2.0.0-release-341 | High |
Related Dependencies
- cowork.calls.zip: kotlin-reflect.jar
- File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/kotlin-reflect.jar
- MD5: 02186288923641939caf2013d51a7aba
- SHA1: 9c3d75110945233bf77d2e1a90604b100884db94
- SHA256: 111bd906921937f76da17760641116d04b57a7a12fcf980efe7c6767f45179f0
cowork.meetingrooms.zip: cowork.meetingrooms.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar
MD5: 8e89cf86c67edb5ec54445e98d5f3598
SHA1: 52e7a3eca9a9bc7573acb7e808fdc5167af153fb
SHA256:87d32e154fb2e5e30a95bf24c7f090dc1db7728cdfac457419f2919488cf53db
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | cowork.meetingrooms | High |
| Vendor | jar | package name | cowork | Low |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | meetingrooms | Low |
| Vendor | Manifest | built-date | 2024-11-16 13:32 | Low |
| Vendor | Manifest | implementation-group | cowork | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | cowork.meetingrooms | High |
| Product | jar | package name | cowork | Highest |
| Product | jar | package name | cowork | Low |
| Product | jar | package name | meetingrooms | Highest |
| Product | jar | package name | meetingrooms | Low |
| Product | jar | package name | server | Low |
| Product | Manifest | built-date | 2024-11-16 13:32 | Low |
| Product | Manifest | implementation-group | cowork | Low |
| Product | Manifest | Implementation-Title | cowork.meetingrooms | High |
| Product | Manifest | specification-title | cowork.meetingrooms | Medium |
| Version | jar | package name | cowork | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
cowork.meetingrooms.zip: cowork.meetingrooms.jar: coworkmeetingroom.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar/com/inet/cowork/meetingrooms/js/coworkmeetingroom.js
MD5: eecdf9034c861b8c4ce94400d7bbe5da
SHA1: c5aa4e115e2e8b81991d29709623c9ce14e721d3
SHA256:ba79a52dfcba3e8a152f3308a7b5da8fbc58b7cdc53cc1ed1fe90bb0ff60eca2
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.meetingrooms.zip: cowork.meetingrooms.jar: coworkmeetingroommoderator.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar/com/inet/cowork/meetingrooms/js/coworkmeetingroommoderator.js
MD5: 7046db96d10623e62efc943ee359e2b0
SHA1: 7d2150147cb6b2e5b88e7be2ad206dfd1c326ba9
SHA256:d32fc45026231d2524634732687f4993a1beb0493459717c30be82d7b663c752
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.meetingrooms.zip: cowork.meetingrooms.jar: endofmeeting.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar/com/inet/cowork/meetingrooms/js/endofmeeting.js
MD5: 4b4c12b95d94bd2e74ec12f2be488e85
SHA1: 68c04779174fc8ae75538d052cb5674b5be62de0
SHA256:87fda5f3ecdd992e223001e91d5934fb65b1ad6bd7981fdcbcc0eac225af0dc6
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.meetingrooms.zip: cowork.meetingrooms.jar: joinmeeting.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar/com/inet/cowork/meetingrooms/js/joinmeeting.js
MD5: df53a50b2a30f742ca7d64024e909b17
SHA1: c853314639e25313c346abaf06d52940b5244d4e
SHA256:df9601551a79ae5159770e91885295223ac6034a46a01e2654c4efba90e9d56c
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.meetingrooms.zip: cowork.meetingrooms.jar: meetingrooms.maintenance.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.meetingrooms.zip/cowork.meetingrooms.jar/com/inet/cowork/meetingrooms/maintenance/meetingrooms.maintenance.js
MD5: 06c9257f0a425d619a95d826cc89dfe6
SHA1: ce8006889dff7bbe6e0628b6657c49200eda2853
SHA256:59b9e1f8d979c485580810262ea50dccb43322c11c36696e73a0c7fa32aa4fd6
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.waitingqueue.zip: cowork.waitingqueue.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.waitingqueue.zip/cowork.waitingqueue.jar
MD5: 599f96d4614f51e086dc5d3c2dd0eea3
SHA1: 57ac7f753589f402a751f23250fb3143ea2a6958
SHA256:b38abf82048ccf7936e41e1ed794c12134c53df68f62adc4ab67e26a340d6000
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | cowork.waitingqueue | High |
| Vendor | jar | package name | cowork | Low |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | waitingqueue | Low |
| Vendor | Manifest | built-date | 2024-11-16 13:32 | Low |
| Vendor | Manifest | implementation-group | cowork | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | cowork.waitingqueue | High |
| Product | jar | package name | cowork | Highest |
| Product | jar | package name | cowork | Low |
| Product | jar | package name | server | Low |
| Product | jar | package name | waitingqueue | Highest |
| Product | jar | package name | waitingqueue | Low |
| Product | Manifest | built-date | 2024-11-16 13:32 | Low |
| Product | Manifest | implementation-group | cowork | Low |
| Product | Manifest | Implementation-Title | cowork.waitingqueue | High |
| Product | Manifest | specification-title | cowork.waitingqueue | Medium |
| Version | jar | package name | cowork | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
cowork.waitingqueue.zip: cowork.waitingqueue.jar: coworkwaitingqueue.dialog.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.waitingqueue.zip/cowork.waitingqueue.jar/com/inet/cowork/waitingqueue/client/js/coworkwaitingqueue.dialog.js
MD5: f9c5578242a3f6f303bc4b8ecdbd24f0
SHA1: 83635f490768d6b2331072b2e1b45cc8dc9a0be7
SHA256:4fbea2b37afad74ee12c8153b70805f47ab19a9c014b51e6b1c800b3321d6df8
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.waitingqueue.zip: cowork.waitingqueue.jar: coworkwaitingqueue.indicator.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.waitingqueue.zip/cowork.waitingqueue.jar/com/inet/cowork/waitingqueue/client/js/coworkwaitingqueue.indicator.js
MD5: 1a53f0787c3a15ece4238fd7ec0164f2
SHA1: c3f4ce397d9b4b115e7cdc1c747f503bb192cd06
SHA256:acc14f41cc825a541ba1011cf33321c2cf17e338b4fb0a3ec015d79734db525d
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.waitingqueue.zip: cowork.waitingqueue.jar: coworkwaitingqueue.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.waitingqueue.zip/cowork.waitingqueue.jar/com/inet/cowork/waitingqueue/client/js/coworkwaitingqueue.js
MD5: 185e7d9d14ac98452aa8667151599004
SHA1: c1dd7606cdfd15ba587f327ac857c1f604b80076
SHA256:619391156826976083ac94c77c6f78c801d6929c133e0619f76f8eb4a7a103f7
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar
MD5: 90fd29002120ae252b7af1d5655ad215
SHA1: 2bc7b7ab896b22f31ce1484b4d05077411d50bf6
SHA256:b88750f06a3b964e8cdc3228fdd2fa966d28119f101d9c5f6ce16249be919c6b
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | cowork-javadoc | High |
| Product | file | name | cowork-javadoc | High |
cowork.zip: cowork-javadoc.jar: jquery-3.6.1.min.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/script-dir/jquery-3.6.1.min.js
MD5: 00727d1d5d9c90f7de826f1a4a9cc632
SHA1: ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
SHA256:a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: jquery-ui.min.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256:672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jquery-ui | High |
| Product | file | name | jquery-ui | High |
| Version | file | version | 1.13.1 | High |
cowork.zip: cowork-javadoc.jar: member-search-index.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/member-search-index.js
MD5: b53fed2c85f54971f9814355b8658c01
SHA1: 0214b99220b6797c45f01569549fcc923694a5d7
SHA256:8d88b33f1eebff05ff24ecdd0d7685ba49518f2fb0dfda9e31318a930d29e445
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: module-search-index.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: package-search-index.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/package-search-index.js
MD5: 7843e0fe10197c0f0117f699e1e7cd40
SHA1: e48fd8df27e997b6b55659eac22ae3a2d68c20a5
SHA256:1aba1d547394c186ec32485f12fa55450a73511ab1cefa478a92dcf1d359520a
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: script.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/script.js
MD5: baf9d9e16237acbdce975a33c54ee8ae
SHA1: cc6a3c8d72f17eff0d613ddfcf7c1095535573f7
SHA256:9a027b197c6b3b44c4952797b2eb0477318a03093a5bbad089e12959e562b975
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: search.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/search.js
MD5: cb277f670590ffec20a12745260518dc
SHA1: 4b222ef8d1c52e1ce5ceb40a3b5c1fb9cad01eca
SHA256:47c74de257f7e407a21e5d22519b664cfa1c83d04c362bff466c8424b702d31f
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: tag-search-index.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/tag-search-index.js
MD5: acda0a4d961a2dbb052cf81694d1c50b
SHA1: 4853e0d2a022b5098359e59d740952ee1e187c04
SHA256:4394bc27c97d0c9018c2fb763bfc045db14433b160e3c1fec16795d1d1967aaf
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork-javadoc.jar: type-search-index.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/type-search-index.js
MD5: 8c30fed2a2e350ef639f9b7bda912507
SHA1: 5670fb1b145339466f0ea57751f0d816cd8eb8b3
SHA256:6340ac435040dd803b2df28710ff32c54598221a2e79d45bf7dbcec174962a57
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar
MD5: a72ec86ebc388790125f3f94c868b593
SHA1: 69d0bd0e6851172f108c7c59a04cba9c7bb852f6
SHA256:875d1ab0b7062edd3c7cf5862c4f3776e5d653d87a321b1cd1ed87aedaa68c45
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | cowork | High |
| Vendor | jar | package name | cowork | Low |
| Vendor | jar | package name | i | Highest |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | server | Low |
| Vendor | Manifest | built-date | 2024-11-16 13:32 | Low |
| Vendor | Manifest | implementation-group | cowork | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | cowork | High |
| Product | jar | package name | cowork | Highest |
| Product | jar | package name | cowork | Low |
| Product | jar | package name | server | Low |
| Product | Manifest | built-date | 2024-11-16 13:32 | Low |
| Product | Manifest | implementation-group | cowork | Low |
| Product | Manifest | Implementation-Title | cowork | High |
| Product | Manifest | specification-title | cowork | Medium |
| Version | jar | package name | cowork | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
cowork.zip: cowork.jar: MessageCreationChart.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/integration/diagnostics/MessageCreationChart.js
MD5: 6f3398cc9560094e95f943d6b84aae06
SHA1: 5079a14766d99d21918e01d8847c2aec34efe94a
SHA256:9f2e95303f979a5ae2cb30188d387dce1b015282689fbcca447488ed96a8809e
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: cowork.diagnostics.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/integration/diagnostics/cowork.diagnostics.js
MD5: a6e5e510de8c405a11ec693dc62334d7
SHA1: ceaf22817b194cbc9b1cb1e1a4f4d4fc235adf1d
SHA256:594d4b75bab085edc78d9706d5630a46bd961e647ef35155066a37c13513135b
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkcomponents.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkcomponents.js
MD5: 2cac3bc9729938a66e3f43a72fe94d3b
SHA1: 5e21f32f953334e7256ae5ed0cb083991b117697
SHA256:cad0cf5c0073e08deaa4485d7d1f89de4e2cf770c4eb36068fd6c2b92c0d2575
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkcontroller.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkcontroller.js
MD5: 0b6c6b4f946132e8fcd00832e32c661b
SHA1: e6b3a59f7ccf66b7cf71503e59fd8a8504a45948
SHA256:f46da733ed3a09eec77d5d71cc4686fc880fd5541e43765ec4ee382662c41851
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkconversation.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkconversation.js
MD5: 1c00cc78852b08bd9e5f9c28dc6665cc
SHA1: 26b4bff6898e246ff7c46fbaea35fbab417038b3
SHA256:55b165b34c7d45448a57ad9f2a1acec27f8bb0940f50b0c192aba41c294345f8
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkfactory.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkfactory.js
MD5: 6b0b49174e8506aa8831f5caf596bb31
SHA1: c229d71ef1e56c11807569310b11690c365aa118
SHA256:522d3ba67ef2ff39d10f83783f66961bb8e2b6fb07b40038032e173d230ac4b7
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkinputbox.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkinputbox.js
MD5: 34580b052fdf8f6b259963e2eeade14b
SHA1: 020082991a1dbfe3593cdbe9609e595b111d9142
SHA256:db436db4b0dec28810da9d28cffc66b537cd8dcc4b0a904cd665a6ed5d7d09ef
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworkmodel.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworkmodel.js
MD5: 0f81ca1764413e9acaafc76d12db81a6
SHA1: cff25d04ef5f52c6b889aade9eea8b455ea4e4fe
SHA256:fd9a6034a39d29a1497e8b5fdb95769e412aa66167a50ebe6374407b43692447
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: coworksettingscontroller.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/coworksettingscontroller.js
MD5: e9b29099ef185ae3bbe8d4da5926b52d
SHA1: 38fbd19feeb6d6426b017343864d9ccb978a50ed
SHA256:504c7d3abc6bc8e2d3d645d2d5ebb9c37af63d420ba505415bdd797de4c9363b
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: flexibledropdownmenu.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/flexibledropdownmenu.js
MD5: 4582b3fd20828e7b4fcf950fce29ecf3
SHA1: 2ee09d9810f335847f65a165c783fe0f0a11d47a
SHA256:37169231f655fbca06cf6e7cf117beaa66036bc1b3404af32d977e5f1b82c7f1
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: inetmarkdown.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/inetmarkdown.js
MD5: ddd9901dff0fdd3681f4010e34cfaa89
SHA1: 95b44114f78f900bec4240c840284f45d6cb775e
SHA256:42008dca21256bafc93373a860532990f1c923ed0d431388e5da7de016d4a9d8
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: showreactionscontroller.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/showreactionscontroller.js
MD5: abd357e703ac1dcfa2dba14cf5a337be
SHA1: 28e5cd68780721034959fa99f07e6c0408e299eb
SHA256:c2d24acddff8e4bb06a81ac849c81a18b4ce4072932e78795cbe14f1583a6871
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
cowork.zip: cowork.jar: teamsettingscontroller.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork.jar/com/inet/cowork/client/js/teamsettingscontroller.js
MD5: 23505db20f3ea0279bab51dbff09fe0b
SHA1: 86eae40ed16f444c5d166064eb4fefe399d28827
SHA256:bfbf9a2ca243bb401ac7bf7921b26b58997bebac3111e79cd3c0970bccf06b31
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
hamcrest-2.2.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/2.2/1820c0968dba3a11a1b30669bb1f01978a91dedc/hamcrest-2.2.jar
MD5: 10b47e837f271d0662f28780e60388e8
SHA1: 1820c0968dba3a11a1b30669bb1f01978a91dedc
SHA256:5e62846a89f05cd78cd9c1a553f340d002458380c320455dd1f8fc5497a8a1c1
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
hamcrest-2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | hamcrest | High |
| Vendor | gradle | artifactid | hamcrest | Highest |
| Vendor | gradle | groupid | org.hamcrest | Highest |
| Vendor | jar | package name | hamcrest | Highest |
| Vendor | jar | package name | hamcrest | Low |
| Vendor | Manifest | automatic-module-name | org.hamcrest | Medium |
| Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium |
| Vendor | Manifest | Implementation-Vendor | hamcrest.org | High |
| Product | file | name | hamcrest | High |
| Product | gradle | artifactid | hamcrest | Highest |
| Product | jar | package name | hamcrest | Highest |
| Product | Manifest | automatic-module-name | org.hamcrest | Medium |
| Product | Manifest | Bundle-Name | hamcrest | Medium |
| Product | Manifest | bundle-symbolicname | org.hamcrest | Medium |
| Product | Manifest | Implementation-Title | hamcrest | High |
| Version | file | version | 2.2 | High |
| Version | Manifest | Implementation-Version | 2.2 | High |
inetcore-24.10-tools.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/24.10/b2caf689aa6ff99ce2c77b1790b7b4d486f7e5a3/inetcore-24.10-tools.jar
MD5: 5a4e65ccdad889e1b9dceb88061b936b
SHA1: b2caf689aa6ff99ce2c77b1790b7b4d486f7e5a3
SHA256:430a59318046eb2340c53385ca0636e9c43a958fa007ca17c37557839726ab3b
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
inetcore-24.10-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | inetcore | High |
| Vendor | gradle | artifactid | inetcore | Highest |
| Vendor | gradle | groupid | shared | Highest |
| Vendor | jar | package name | test | Low |
| Product | file | name | inetcore | High |
| Product | gradle | artifactid | inetcore | Highest |
| Version | file | name | inetcore | Medium |
| Version | file | version | 24.10 | High |
| Version | gradle | version | 24.10 | Highest |
inetcore-24.10.jar (shaded: com.inet.shared:inetcore:null)
Description:
A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)
ColorUtilities contains a set of tools to perform common color operations easily.
License:
LGPL: http://www.gnu.org/licenses/lgpl.txt
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/24.10/6530cbd98703c9172106ad293be4f0f541c7c857/inetcore-24.10.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: b7bc59004e73f85cce4369bc5e034e6b
SHA1: 9caff88589bdd8fdc3c3f320340b76830f3818de
SHA256:aab973b164e2d64808cd34c47b78399c4f016ec308900f5393733d3bc5c706bc
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | pom | artifactid | inetcore | Low |
| Vendor | pom | developer email | contact@inetsoftware.de | Low |
| Vendor | pom | developer email | morgand@apache.org | Low |
| Vendor | pom | developer id | inetsoftware | Medium |
| Vendor | pom | developer id | romainguy | Medium |
| Vendor | pom | developer id | sun | Medium |
| Vendor | pom | developer name | i-net /// software | Medium |
| Vendor | pom | developer name | Romain Guy | Medium |
| Vendor | pom | developer name | Sun | Medium |
| Vendor | pom | developer org | Sun | Medium |
| Vendor | pom | groupid | com.inet.shared | Highest |
| Vendor | pom | name | BlendComposite and ColorUtils | High |
| Vendor | pom (hint) | developer id | oracle | Medium |
| Vendor | pom (hint) | developer name | oracle | Medium |
| Vendor | pom (hint) | developer org | oracle | Medium |
| Product | pom | artifactid | inetcore | Highest |
| Product | pom | developer email | contact@inetsoftware.de | Low |
| Product | pom | developer email | morgand@apache.org | Low |
| Product | pom | developer id | inetsoftware | Low |
| Product | pom | developer id | romainguy | Low |
| Product | pom | developer id | sun | Low |
| Product | pom | developer name | i-net /// software | Low |
| Product | pom | developer name | Romain Guy | Low |
| Product | pom | developer name | Sun | Low |
| Product | pom | developer org | Sun | Low |
| Product | pom | groupid | com.inet.shared | Highest |
| Product | pom | name | BlendComposite and ColorUtils | High |
inetcore-24.10.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/24.10/6530cbd98703c9172106ad293be4f0f541c7c857/inetcore-24.10.jar
MD5: d73f6e0b5429113ee41fa3637793650c
SHA1: 6530cbd98703c9172106ad293be4f0f541c7c857
SHA256:2e5a5090484b024316e444c2ec707abfaace0990f954b4e72ee3062155496923
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
inetcore-24.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | inetcore | High |
| Vendor | gradle | artifactid | inetcore | Highest |
| Vendor | gradle | groupid | shared | Highest |
| Vendor | jar | package name | i | Highest |
| Vendor | jar | package name | inet | Low |
| Vendor | Manifest | application-library-allowable-codebase | * | Low |
| Vendor | Manifest | built-date | 2024-11-16 12:23 | Low |
| Vendor | Manifest | codebase | * | Low |
| Vendor | Manifest | implementation-group | shared | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | permissions | all-permissions | Low |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | trusted-library | false | Low |
| Vendor | Manifest | trusted-only | false | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | inetcore | High |
| Product | gradle | artifactid | inetcore | Highest |
| Product | jar | package name | permissions | Highest |
| Product | jar | package name | shared | Highest |
| Product | Manifest | application-library-allowable-codebase | * | Low |
| Product | Manifest | built-date | 2024-11-16 12:23 | Low |
| Product | Manifest | codebase | * | Low |
| Product | Manifest | implementation-group | shared | Low |
| Product | Manifest | Implementation-Title | inetcore | High |
| Product | Manifest | permissions | all-permissions | Low |
| Product | Manifest | specification-title | inetcore | Medium |
| Product | Manifest | trusted-library | false | Low |
| Product | Manifest | trusted-only | false | Low |
| Version | file | name | inetcore | Medium |
| Version | file | version | 24.10 | High |
| Version | gradle | version | 24.10 | Highest |
| Version | jar | package name | permissions | Highest |
| Version | jar | package name | shared | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/java-21-jre-x64-linux.tar.gz/java-21-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: e2138468a2337af9f0acf041d47ae631
SHA1: 8ef69b54cab31de533182a0d3ec4e7d6f9207016
SHA256:644d3383b1bacc328b0f3e6676abfe32b2af105c0c6177b34eaa7fb6bba9f7a0
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jrt-fs | High |
| Vendor | jar | package name | internal | Low |
| Vendor | jar | package name | jdk | Low |
| Vendor | jar | package name | jimage | Low |
| Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High |
| Vendor | Manifest | specification-vendor | Oracle Corporation | Low |
| Product | file | name | jrt-fs | High |
| Product | jar | package name | internal | Low |
| Product | jar | package name | jimage | Low |
| Product | Manifest | Implementation-Title | Java Runtime Environment | High |
| Product | Manifest | specification-title | Java Platform API Specification | Medium |
| Version | Manifest | Implementation-Version | 21.0.5 | High |
jlessc-1.12.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.12/8ea5dba973ee8e969a243e08e47a27ca48121b5c/jlessc-1.12.jar
MD5: 8e0d57ed6e6809be8002db58024c370e
SHA1: 8ea5dba973ee8e969a243e08e47a27ca48121b5c
SHA256:0969bc655eba47f824791ef12ed90c96baac2238a775b0ceaa0921deeb6681f8
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
jlessc-1.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jlessc | High |
| Vendor | gradle | artifactid | jlessc | Highest |
| Vendor | gradle | groupid | de.inetsoftware | Highest |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | less | Low |
| Vendor | jar | package name | lib | Low |
| Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium |
| Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium |
| Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Product | file | name | jlessc | High |
| Product | gradle | artifactid | jlessc | Highest |
| Product | jar | package name | less | Low |
| Product | jar | package name | lib | Low |
| Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium |
| Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium |
| Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High |
| Version | file | version | 1.12 | High |
| Version | Manifest | Implementation-Version | 1.12 | High |
junit-4.13.2.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit | High |
| Vendor | gradle | artifactid | junit | Highest |
| Vendor | gradle | groupid | junit | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | Manifest | automatic-module-name | junit | Medium |
| Vendor | Manifest | implementation-url | http://junit.org | Low |
| Vendor | Manifest | Implementation-Vendor | JUnit | High |
| Vendor | Manifest | Implementation-Vendor-Id | junit | Medium |
| Product | file | name | junit | High |
| Product | gradle | artifactid | junit | Highest |
| Product | jar | package name | junit | Highest |
| Product | Manifest | automatic-module-name | junit | Medium |
| Product | Manifest | Implementation-Title | JUnit | High |
| Product | Manifest | implementation-url | http://junit.org | Low |
| Version | file | version | 4.13.2 | High |
| Version | Manifest | Implementation-Version | 4.13.2 | High |
junit-jupiter-5.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.10.3/6686d8fbf251f9bf8ecba413cab57b9e00f9134d/junit-jupiter-5.10.3.jar
MD5: 8312d239f10b3aaa94c3dc69f84a250f
SHA1: 6686d8fbf251f9bf8ecba413cab57b9e00f9134d
SHA256:e6fc09f881eba8b8d8a7660a6c7f4d582fa7881f306136afe2d82964a2e7c22f
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-jupiter-5.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
- pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-jupiter | High |
| Vendor | gradle | artifactid | junit-jupiter | Highest |
| Vendor | gradle | groupid | org.junit.jupiter | Highest |
| Vendor | jar | package name | module-info | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-jupiter | High |
| Product | gradle | artifactid | junit-jupiter | Highest |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium |
| Product | Manifest | bundle-symbolicname | junit-jupiter | Medium |
| Product | Manifest | Implementation-Title | junit-jupiter | High |
| Product | Manifest | specification-title | junit-jupiter | Medium |
| Version | file | version | 5.10.3 | High |
| Version | Manifest | Implementation-Version | 5.10.3 | High |
junit-jupiter-api-5.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.10.3/a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5/junit-jupiter-api-5.10.3.jar
MD5: 9c5af4543b8784a55eab254418cc367b
SHA1: a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5
SHA256:6efe6e01ca1ff79b7bf4c6f1eed0b29292e166c27eaf7b00ac981a14d4de61aa
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-jupiter-api-5.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-jupiter-api | High |
| Vendor | gradle | artifactid | junit-jupiter-api | Highest |
| Vendor | gradle | groupid | org.junit.jupiter | Highest |
| Vendor | jar | package name | api | Highest |
| Vendor | jar | package name | api | Low |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | jupiter | Highest |
| Vendor | jar | package name | jupiter | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-jupiter-api | High |
| Product | gradle | artifactid | junit-jupiter-api | Highest |
| Product | jar | package name | api | Highest |
| Product | jar | package name | api | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | jupiter | Highest |
| Product | jar | package name | jupiter | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium |
| Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium |
| Product | Manifest | Implementation-Title | junit-jupiter-api | High |
| Product | Manifest | specification-title | junit-jupiter-api | Medium |
| Version | file | version | 5.10.3 | High |
| Version | Manifest | Implementation-Version | 5.10.3 | High |
junit-jupiter-engine-5.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.10.3/48c14e866bb1a87ca35d24ff068463bb202ada24/junit-jupiter-engine-5.10.3.jar
MD5: c87ca6659d594120a6030a2760bcdf14
SHA1: 48c14e866bb1a87ca35d24ff068463bb202ada24
SHA256:bbd3ce8dc11e9925071ef9691d68af1ab6e712faa6851f7c5275bc8aafc88673
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-jupiter-engine-5.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-jupiter-engine | High |
| Vendor | gradle | artifactid | junit-jupiter-engine | Highest |
| Vendor | gradle | groupid | org.junit.jupiter | Highest |
| Vendor | jar | package name | engine | Highest |
| Vendor | jar | package name | engine | Low |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | jupiter | Highest |
| Vendor | jar | package name | jupiter | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.10.3" | Low |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-jupiter-engine | High |
| Product | gradle | artifactid | junit-jupiter-engine | Highest |
| Product | jar | package name | engine | Highest |
| Product | jar | package name | engine | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | jupiter | Highest |
| Product | jar | package name | jupiter | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium |
| Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium |
| Product | Manifest | Implementation-Title | junit-jupiter-engine | High |
| Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.10.3" | Low |
| Product | Manifest | specification-title | junit-jupiter-engine | Medium |
| Version | file | version | 5.10.3 | High |
| Version | Manifest | Implementation-Version | 5.10.3 | High |
junit-jupiter-params-5.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.10.3/4852f4e4af9074d9214213b199751f99efeab8b9/junit-jupiter-params-5.10.3.jar
MD5: 8c0d875131fa73e688df785a3b2f338d
SHA1: 4852f4e4af9074d9214213b199751f99efeab8b9
SHA256:7c3ed8cefb12496b76c53c3da986ea8f0bf3f426781869475551ae3a506c1ad8
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-jupiter-params-5.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-jupiter-params | High |
| Vendor | gradle | artifactid | junit-jupiter-params | Highest |
| Vendor | gradle | groupid | org.junit.jupiter | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | jupiter | Highest |
| Vendor | jar | package name | jupiter | Low |
| Vendor | jar | package name | params | Highest |
| Vendor | jar | package name | params | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-jupiter-params | High |
| Product | gradle | artifactid | junit-jupiter-params | Highest |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | jupiter | Highest |
| Product | jar | package name | jupiter | Low |
| Product | jar | package name | params | Highest |
| Product | jar | package name | params | Low |
| Product | jar | package name | shadow | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium |
| Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium |
| Product | Manifest | Implementation-Title | junit-jupiter-params | High |
| Product | Manifest | specification-title | junit-jupiter-params | Medium |
| Version | file | version | 5.10.3 | High |
| Version | Manifest | Implementation-Version | 5.10.3 | High |
junit-platform-commons-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.10.3/a353d42a2f13343a7cb80c5228ae66ff64495481/junit-platform-commons-1.10.3.jar
MD5: 83ff374dd428b03f1cf70d0143259f01
SHA1: a353d42a2f13343a7cb80c5228ae66ff64495481
SHA256:9787f04d49db59397cdd7555d421a5bd2d1445666997d327b94f85e38bed57f1
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-commons-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-commons | High |
| Vendor | gradle | artifactid | junit-platform-commons | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | commons | Highest |
| Vendor | jar | package name | commons | Low |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | org | Highest |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-commons | High |
| Product | gradle | artifactid | junit-platform-commons | Highest |
| Product | jar | package name | commons | Highest |
| Product | jar | package name | commons | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | jar | package name | util | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium |
| Product | Manifest | Implementation-Title | junit-platform-commons | High |
| Product | Manifest | multi-release | true | Low |
| Product | Manifest | specification-title | junit-platform-commons | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-engine-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.10.3/365a320c3cfd47f3346625e541e424e35dc75c42/junit-platform-engine-1.10.3.jar
MD5: 8fe56ec6a59c1e208e8ba0def9e47bf3
SHA1: 365a320c3cfd47f3346625e541e424e35dc75c42
SHA256:df7c32bf75cf47c4c8ddd1942091027947a7d765d30b731fe00830115fafa133
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-engine-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-engine | High |
| Vendor | gradle | artifactid | junit-platform-engine | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | engine | Highest |
| Vendor | jar | package name | engine | Low |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-engine | High |
| Product | gradle | artifactid | junit-platform-engine | Highest |
| Product | jar | package name | engine | Highest |
| Product | jar | package name | engine | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | jar | package name | support | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium |
| Product | Manifest | Implementation-Title | junit-platform-engine | High |
| Product | Manifest | specification-title | junit-platform-engine | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-launcher-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.10.3/2e07e6389624f3e93fb2e87aec2fdc30cc84b069/junit-platform-launcher-1.10.3.jar
MD5: 2bc703d74e40b64a2c7964e3ef4da945
SHA1: 2e07e6389624f3e93fb2e87aec2fdc30cc84b069
SHA256:deaeede2f011eaf94f5bc681e04eee2f4a0f6d69771e1a79aa950d898b405d8d
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-launcher-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-launcher | High |
| Vendor | gradle | artifactid | junit-platform-launcher | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | launcher | Highest |
| Vendor | jar | package name | launcher | Low |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.10.3" | Low |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-launcher | High |
| Product | gradle | artifactid | junit-platform-launcher | Highest |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | launcher | Highest |
| Product | jar | package name | launcher | Low |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium |
| Product | Manifest | Implementation-Title | junit-platform-launcher | High |
| Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.10.3" | Low |
| Product | Manifest | specification-title | junit-platform-launcher | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-suite-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.10.3/48ea585d380c250428cd440b354e344461a887b4/junit-platform-suite-1.10.3.jar
MD5: d508bda8927cf328d45dc2a128f073c1
SHA1: 48ea585d380c250428cd440b354e344461a887b4
SHA256:17f9384f40dcb480784277b2d1a96e560d69936eda6296c15c68c209e476828b
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-suite-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
- pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-suite | High |
| Vendor | gradle | artifactid | junit-platform-suite | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | module-info | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-suite | High |
| Product | gradle | artifactid | junit-platform-suite | Highest |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium |
| Product | Manifest | Implementation-Title | junit-platform-suite | High |
| Product | Manifest | specification-title | junit-platform-suite | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-suite-api-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.10.3/8358a40913929201e7ba817ca7a66456165fa7eb/junit-platform-suite-api-1.10.3.jar
MD5: 689122f3641d81b7756fec816e79a6f9
SHA1: 8358a40913929201e7ba817ca7a66456165fa7eb
SHA256:bdb1de13d1a86a17a8093f2612014cd3271a1625b46fedee01c9982a3b4287af
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-suite-api-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-suite-api | High |
| Vendor | gradle | artifactid | junit-platform-suite-api | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | api | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | jar | package name | suite | Highest |
| Vendor | jar | package name | suite | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-suite-api | High |
| Product | gradle | artifactid | junit-platform-suite-api | Highest |
| Product | jar | package name | api | Highest |
| Product | jar | package name | api | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | jar | package name | suite | Highest |
| Product | jar | package name | suite | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium |
| Product | Manifest | Implementation-Title | junit-platform-suite-api | High |
| Product | Manifest | specification-title | junit-platform-suite-api | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-suite-commons-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.10.3/e184697bc6e8d96072815df8ca40eaed940c3fd8/junit-platform-suite-commons-1.10.3.jar
MD5: 4218be8526eab4fdb25437440a1225d5
SHA1: e184697bc6e8d96072815df8ca40eaed940c3fd8
SHA256:da51c58786762602848f38bcf45d9d18387ed10d030308ebd8d4989cfae7fd59
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-suite-commons-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-suite-commons | High |
| Vendor | gradle | artifactid | junit-platform-suite-commons | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | commons | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | jar | package name | suite | Highest |
| Vendor | jar | package name | suite | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-suite-commons | High |
| Product | gradle | artifactid | junit-platform-suite-commons | Highest |
| Product | jar | package name | commons | Highest |
| Product | jar | package name | commons | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | jar | package name | suite | Highest |
| Product | jar | package name | suite | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium |
| Product | Manifest | Implementation-Title | junit-platform-suite-commons | High |
| Product | Manifest | specification-title | junit-platform-suite-commons | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-platform-suite-engine-1.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.10.3/a3585e7639577aa12b24e90f2ab7f0433997b5e0/junit-platform-suite-engine-1.10.3.jar
MD5: 1f4805e105121cea17015917c1411ace
SHA1: a3585e7639577aa12b24e90f2ab7f0433997b5e0
SHA256:65887849bc0ae1e11f19500116e1c1a68bfb101813bfc4c63e72225cf3354340
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-platform-suite-engine-1.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-platform-suite-engine | High |
| Vendor | gradle | artifactid | junit-platform-suite-engine | Highest |
| Vendor | gradle | groupid | org.junit.platform | Highest |
| Vendor | jar | package name | engine | Highest |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | platform | Low |
| Vendor | jar | package name | suite | Highest |
| Vendor | jar | package name | suite | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-platform-suite-engine | High |
| Product | gradle | artifactid | junit-platform-suite-engine | Highest |
| Product | jar | package name | engine | Highest |
| Product | jar | package name | engine | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | platform | Low |
| Product | jar | package name | suite | Highest |
| Product | jar | package name | suite | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium |
| Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium |
| Product | Manifest | Implementation-Title | junit-platform-suite-engine | High |
| Product | Manifest | specification-title | junit-platform-suite-engine | Medium |
| Version | file | version | 1.10.3 | High |
| Version | Manifest | Implementation-Version | 1.10.3 | High |
junit-vintage-engine-5.10.3.jar
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.10.3/18ddfc904011b7b8ab7bcf606ca77b7469c05f48/junit-vintage-engine-5.10.3.jar
MD5: 794a99a9431931e019e4fe9ea5b06bd5
SHA1: 18ddfc904011b7b8ab7bcf606ca77b7469c05f48
SHA256:d60288d3e850ba9f2af4701203a5171ef30634efd34da40ab47facebd2c65d6c
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
junit-vintage-engine-5.10.3.jar is in the transitive dependency tree of the listed items.Included by:
- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
- pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | junit-vintage-engine | High |
| Vendor | gradle | artifactid | junit-vintage-engine | Highest |
| Vendor | gradle | groupid | org.junit.vintage | Highest |
| Vendor | jar | package name | engine | Highest |
| Vendor | jar | package name | engine | Low |
| Vendor | jar | package name | junit | Highest |
| Vendor | jar | package name | junit | Low |
| Vendor | jar | package name | vintage | Highest |
| Vendor | jar | package name | vintage | Low |
| Vendor | Manifest | build-date | 2024-06-27 | Low |
| Vendor | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Vendor | Manifest | build-time | 16:07:04.699+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium |
| Vendor | Manifest | Implementation-Vendor | junit.org | High |
| Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.10.3" | Low |
| Vendor | Manifest | specification-vendor | junit.org | Low |
| Product | file | name | junit-vintage-engine | High |
| Product | gradle | artifactid | junit-vintage-engine | Highest |
| Product | jar | package name | engine | Highest |
| Product | jar | package name | engine | Low |
| Product | jar | package name | junit | Highest |
| Product | jar | package name | vintage | Highest |
| Product | jar | package name | vintage | Low |
| Product | Manifest | build-date | 2024-06-27 | Low |
| Product | Manifest | build-revision | 55d12321315b11eaf6ed87e73c47bcdc39ade588 | Low |
| Product | Manifest | build-time | 16:07:04.699+0200 | Low |
| Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium |
| Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium |
| Product | Manifest | Implementation-Title | junit-vintage-engine | High |
| Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.10.3" | Low |
| Product | Manifest | specification-title | junit-vintage-engine | Medium |
| Version | file | version | 5.10.3 | High |
| Version | Manifest | Implementation-Version | 5.10.3 | High |
opentest4j-1.3.0.jar
License:
The Apache License, Version 2.0
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:- pkg:maven/org.junit.platform/junit-platform-suite@1.10.3
- pkg:maven/org.junit.jupiter/junit-jupiter@5.10.3
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | opentest4j | High |
| Vendor | gradle | artifactid | opentest4j | Highest |
| Vendor | gradle | groupid | org.opentest4j | Highest |
| Vendor | jar | package name | opentest4j | Highest |
| Vendor | jar | package name | opentest4j | Low |
| Vendor | Manifest | build-date | 2023-07-06 | Low |
| Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low |
| Vendor | Manifest | build-time | 14:25:06.116+0200 | Low |
| Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium |
| Vendor | Manifest | Implementation-Vendor | opentest4j.org | High |
| Vendor | Manifest | specification-vendor | opentest4j.org | Low |
| Product | file | name | opentest4j | High |
| Product | gradle | artifactid | opentest4j | Highest |
| Product | jar | package name | opentest4j | Highest |
| Product | Manifest | build-date | 2023-07-06 | Low |
| Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low |
| Product | Manifest | build-time | 14:25:06.116+0200 | Low |
| Product | Manifest | Bundle-Name | opentest4j | Medium |
| Product | Manifest | bundle-symbolicname | org.opentest4j | Medium |
| Product | Manifest | Implementation-Title | opentest4j | High |
| Product | Manifest | specification-title | opentest4j | Medium |
| Version | file | version | 1.3.0 | High |
| Version | Manifest | Implementation-Version | 1.3.0 | High |
slf4j-api-2.0.13.jar
Description:
The slf4j API
License:
http://www.opensource.org/licenses/mit-license.php
File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.13/80229737f704b121a318bba5d5deacbcf395bc77/slf4j-api-2.0.13.jar
MD5: 7f4028aa04f75427327f3f30cd62ba4e
SHA1: 80229737f704b121a318bba5d5deacbcf395bc77
SHA256:e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9
Referenced In Project/Scope: CoWorkInstaller:inetPlugin
slf4j-api-2.0.13.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/cowork/CoWorkInstaller@24.10
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | slf4j-api | High |
| Vendor | gradle | artifactid | slf4j-api | Highest |
| Vendor | gradle | groupid | org.slf4j | Highest |
| Vendor | jar | package name | slf4j | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | slf4j-api | Low |
| Vendor | pom | groupid | org.slf4j | Highest |
| Vendor | pom | name | SLF4J API Module | High |
| Vendor | pom | parent-artifactid | slf4j-parent | Low |
| Vendor | pom | url | http://www.slf4j.org | Highest |
| Product | file | name | slf4j-api | High |
| Product | gradle | artifactid | slf4j-api | Highest |
| Product | jar | package name | slf4j | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Product | Manifest | Bundle-Name | SLF4J API Module | Medium |
| Product | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Product | Manifest | Implementation-Title | slf4j-api | High |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | slf4j-api | Highest |
| Product | pom | groupid | org.slf4j | Highest |
| Product | pom | name | SLF4J API Module | High |
| Product | pom | parent-artifactid | slf4j-parent | Medium |
| Product | pom | url | http://www.slf4j.org | Medium |
| Version | file | version | 2.0.13 | High |
| Version | gradle | version | 2.0.13 | Highest |
| Version | Manifest | Bundle-Version | 2.0.13 | High |
| Version | Manifest | Implementation-Version | 2.0.13 | High |
| Version | pom | version | 2.0.13 | Highest |
taskplanner.coworkmessage.zip: taskplanner.coworkmessage.jar
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/taskplanner.coworkmessage.zip/taskplanner.coworkmessage.jar
MD5: faffd31cc6aefb88de92d272a1895b92
SHA1: fadc866380396c7779c8aa2016408b84d0fae7ca
SHA256:3911bbaab9a67a2b3c9dbad703cd5d2baf3e54743da2ae2fb35748365abef5a4
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | taskplanner.coworkmessage | High |
| Vendor | jar | package name | inet | Low |
| Vendor | jar | package name | plugin | Low |
| Vendor | jar | package name | taskplanner | Low |
| Vendor | Manifest | built-date | 2024-11-16 13:32 | Low |
| Vendor | Manifest | implementation-group | cowork | Low |
| Vendor | Manifest | Implementation-Vendor | i-net software | High |
| Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium |
| Vendor | Manifest | specification-vendor | i-net software | Low |
| Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium |
| Product | file | name | taskplanner.coworkmessage | High |
| Product | jar | package name | cowork | Highest |
| Product | jar | package name | cowork | Low |
| Product | jar | package name | plugin | Low |
| Product | jar | package name | taskplanner | Highest |
| Product | jar | package name | taskplanner | Low |
| Product | Manifest | built-date | 2024-11-16 13:32 | Low |
| Product | Manifest | implementation-group | cowork | Low |
| Product | Manifest | Implementation-Title | taskplanner.coworkmessage | High |
| Product | Manifest | specification-title | taskplanner.coworkmessage | Medium |
| Version | jar | package name | cowork | Highest |
| Version | Manifest | Implementation-Version | 24.10.221 | High |
Suppressed Vulnerabilities
cowork.calls.zip: ice4j.jar
Description:
A Java implementation of the ICE protocol
License:
Apache-2.0: https://github.com/jitsi/ice4j/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/ice4j.jar
MD5: 9b36678cde2576f325cd534c710a260b
SHA1: 4f3978650123e1d0d4218f9233f30a5bbe71a662
SHA256: 7e68b3531919ebc577694dd6cb9712b46bde51600a443cacc573e411ba732010
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | ice4j | High |
| Vendor | jar | package name | ice | Highest |
| Vendor | jar | package name | ice4j | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/ice4j | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.ice4j | Medium |
| Vendor | pom | artifactid | ice4j | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | ice4j | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/ice4j | Highest |
| Product | file | name | ice4j | High |
| Product | jar | package name | ice | Highest |
| Product | jar | package name | ice4j | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/ice4j | Low |
| Product | Manifest | Bundle-Name | ice4j | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.ice4j | Medium |
| Product | pom | artifactid | ice4j | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | ice4j | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/ice4j | High |
| Version | pom | version | 3.0-72-g824cd4b | Highest |
CVE-2022-43550 suppressed
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Notes: false positives, no end date
CVE-2008-7271 - This is for the eclipse ide and not for any library from eclipse.
CVE-2010-4647 - This is for the eclipse ide and not for any library from eclipse.
CVE-2020-26939 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2021-4236 - This is for a go project, match on every lib with 'web' in the name
CVE-2021-4277 - This is for a utils project from fredssmith, match on every lib with 'utils' in the name
CVE-2022-31548 - This is a CVE for a sample phyton project.
CVE-2022-43550 - This is a CVE for the jitsi main project and not for any library from jitsi.
CVE-2022-45688 - This is for hutool-json, matched on every component with 'json' in the name
CVE-2023-5072 - This is for JSON-java, matched on every component with 'json' in the name
CVE-2023-33202 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2023-35116 - DISPUTED
CVE-2023-36052 - This is for Azure CLI and not for com.azure:azure-core.
CVE-2023-45161 - This is for 1E-Exchange which we does not use.
CVSSv3:
- CRITICAL (9.8)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
References:
- support@hackerone.com - PATCH
Vulnerable Software & Versions:
cowork.calls.zip: jicoco-config.jar
Description:
Jitsi Common Components (Configuration Utilities)
License:
"Apache-2.0";link="https://github.com/jitsi/jicoco/blob/master/LICENSE"
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jicoco-config.jar
MD5: 4aa7f05db685fb7c9bc175ac6f54b777
SHA1: efe8803db7cb8c04e94aeb20dbc0bb8a5d18e419
SHA256: f8dfdd24730ac88600575b5decf151f91d13726e657d1389a2c56dae6edabb8d
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jicoco-config | High |
| Vendor | jar | package name | config | Highest |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jicoco/jicoco-config | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.config | Medium |
| Vendor | pom | artifactid | jicoco-config | Low |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jicoco-config | High |
| Vendor | pom | parent-artifactid | jicoco-parent | Low |
| Product | file | name | jicoco-config | High |
| Product | jar | package name | config | Highest |
| Product | jar | package name | jitsi | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jicoco/jicoco-config | Low |
| Product | Manifest | Bundle-Name | jicoco-config | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.config | Medium |
| Product | pom | artifactid | jicoco-config | Highest |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jicoco-config | High |
| Product | pom | parent-artifactid | jicoco-parent | Medium |
| Version | pom | version | 1.1-141-g30ec741 | Highest |
CVE-2022-43550 suppressed
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Notes: false positives, no end date
CVE-2008-7271 - This is for the eclipse ide and not for any library from eclipse.
CVE-2010-4647 - This is for the eclipse ide and not for any library from eclipse.
CVE-2020-26939 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2021-4236 - This is for a go project, match on every lib with 'web' in the name
CVE-2021-4277 - This is for a utils project from fredssmith, match on every lib with 'utils' in the name
CVE-2022-31548 - This is a CVE for a sample phyton project.
CVE-2022-43550 - This is a CVE for the jitsi main project and not for any library from jitsi.
CVE-2022-45688 - This is for hutool-json, matched on every component with 'json' in the name
CVE-2023-5072 - This is for JSON-java, matched on every component with 'json' in the name
CVE-2023-33202 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2023-35116 - DISPUTED
CVE-2023-36052 - This is for Azure CLI and not for com.azure:azure-core.
CVE-2023-45161 - This is for 1E-Exchange which we does not use.
CVSSv3:
- CRITICAL (9.8)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
References:
- support@hackerone.com - PATCH
Vulnerable Software & Versions:
cowork.calls.zip: jitsi-metaconfig.jar
Description:
jitsi-metaconfig helps solve the problems around the evolution of configuration properties
License:
Apache-2.0: https://github.com/jitsi/jitsi-metaconfig/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jitsi-metaconfig.jar
MD5: 9a2222e7380ad57b9904e6442ff528d2
SHA1: 1722514941c9ad19186429add7ae6b813cab85ee
SHA256: 55e32bfdfe9a0536f39afcf8af201d4ab121edaccd5fdf21cd1a27a63ece3cf0
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jitsi-metaconfig | High |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | jar | package name | metaconfig | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-metaconfig | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.metaconfig | Medium |
| Vendor | pom | artifactid | jitsi-metaconfig | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jitsi-metaconfig | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/jitsi-metaconfig | Highest |
| Product | file | name | jitsi-metaconfig | High |
| Product | jar | package name | jitsi | Highest |
| Product | jar | package name | metaconfig | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-developers | "org.jitsi";email="dev@jitsi.org";name="Jitsi Team" | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-metaconfig | Low |
| Product | Manifest | Bundle-Name | jitsi-metaconfig | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.metaconfig | Medium |
| Product | pom | artifactid | jitsi-metaconfig | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jitsi-metaconfig | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/jitsi-metaconfig | High |
| Version | pom | version | 1.0-12-g02d4bd5 | Highest |
CVE-2022-43550 suppressed
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Notes: false positives, no end date
CVE-2008-7271 - This is for the eclipse ide and not for any library from eclipse.
CVE-2010-4647 - This is for the eclipse ide and not for any library from eclipse.
CVE-2020-26939 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2021-4236 - This is for a go project, match on every lib with 'web' in the name
CVE-2021-4277 - This is for a utils project from fredssmith, match on every lib with 'utils' in the name
CVE-2022-31548 - This is a CVE for a sample phyton project.
CVE-2022-43550 - This is a CVE for the jitsi main project and not for any library from jitsi.
CVE-2022-45688 - This is for hutool-json, matched on every component with 'json' in the name
CVE-2023-5072 - This is for JSON-java, matched on every component with 'json' in the name
CVE-2023-33202 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2023-35116 - DISPUTED
CVE-2023-36052 - This is for Azure CLI and not for com.azure:azure-core.
CVE-2023-45161 - This is for 1E-Exchange which we does not use.
CVSSv3:
- CRITICAL (9.8)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
References:
- support@hackerone.com - PATCH
Vulnerable Software & Versions:
cowork.calls.zip: jitsi-utils.jar
Description:
A set of basic utilities used in Jitsi projects
License:
Apache-2.0: https://github.com/jitsi/jitsi-utils/blob/master/LICENSE
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.calls.zip/jitsi-utils.jar
MD5: 2cd4a7f88a29487ab5d8cc01a4849851
SHA1: ffb5920f6cd784ca7eb6cbd97d533118ffaa0617
SHA256: c653af4010989d8efbf1f561282654be2fda5d2a506796d6cbb7776a16021c1b
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jitsi-utils | High |
| Vendor | jar | package name | jitsi | Highest |
| Vendor | jar | package name | utils | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-utils | Low |
| Vendor | Manifest | bundle-symbolicname | org.jitsi.utils | Medium |
| Vendor | pom | artifactid | jitsi-utils | Low |
| Vendor | pom | developer email | dev@jitsi.org | Low |
| Vendor | pom | developer id | org.jitsi | Medium |
| Vendor | pom | developer name | Jitsi Team | Medium |
| Vendor | pom | groupid | org.jitsi | Highest |
| Vendor | pom | name | jitsi-utils | High |
| Vendor | pom | organization name | jitsi.org | High |
| Vendor | pom | organization url | https://jitsi.org | Medium |
| Vendor | pom | url | jitsi/jitsi-utils | Highest |
| Product | file | name | jitsi-utils | High |
| Product | jar | package name | jitsi | Highest |
| Product | jar | package name | utils | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://github.com/jitsi/jitsi-utils | Low |
| Product | Manifest | Bundle-Name | jitsi-utils | Medium |
| Product | Manifest | bundle-symbolicname | org.jitsi.utils | Medium |
| Product | pom | artifactid | jitsi-utils | Highest |
| Product | pom | developer email | dev@jitsi.org | Low |
| Product | pom | developer id | org.jitsi | Low |
| Product | pom | developer name | Jitsi Team | Low |
| Product | pom | groupid | org.jitsi | Highest |
| Product | pom | name | jitsi-utils | High |
| Product | pom | organization name | jitsi.org | Low |
| Product | pom | organization url | https://jitsi.org | Low |
| Product | pom | url | jitsi/jitsi-utils | High |
| Version | pom | version | 1.0-132-g83984af | Highest |
CVE-2022-43550 suppressed
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Notes: false positives, no end date
CVE-2008-7271 - This is for the eclipse ide and not for any library from eclipse.
CVE-2010-4647 - This is for the eclipse ide and not for any library from eclipse.
CVE-2020-26939 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2021-4236 - This is for a go project, match on every lib with 'web' in the name
CVE-2021-4277 - This is for a utils project from fredssmith, match on every lib with 'utils' in the name
CVE-2022-31548 - This is a CVE for a sample phyton project.
CVE-2022-43550 - This is a CVE for the jitsi main project and not for any library from jitsi.
CVE-2022-45688 - This is for hutool-json, matched on every component with 'json' in the name
CVE-2023-5072 - This is for JSON-java, matched on every component with 'json' in the name
CVE-2023-33202 - The BouncyCastle FIPS variant uses same maven package matcher but has different version numbers.
CVE-2023-35116 - DISPUTED
CVE-2023-36052 - This is for Azure CLI and not for com.azure:azure-core.
CVE-2023-45161 - This is for 1E-Exchange which we does not use.
CVSSv3:
- CRITICAL (9.8)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
References:
- support@hackerone.com - PATCH
Vulnerable Software & Versions:
cowork.zip: cowork-javadoc.jar: jquery-ui.min.js
File Path: /home/jenkins/workspace/cowork/Check-Product-Installer-for-Security-Problems/CoWorkInstaller/build/tmp/dependencies/i-net CoWork/plugins/cowork.zip/cowork-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256: 672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: CoWorkInstaller
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jquery-ui | High |
| Product | file | name | jquery-ui | High |
| Version | file | version | 1.13.1 | High |
CVE-2022-31160 suppressed
jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Notes: JavaDoc embedded JQuery UI - requires updated Java Version with newer javadoc
CVSSv3:
- MEDIUM (6.1)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A
References:
Vulnerable Software & Versions (NVD):
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.2
- cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*