UNCLASSIFIED - NO CUI

chore(findings): sonarsource/sonarqube/sonarqube8-datacenter-app

Summary

sonarsource/sonarqube/sonarqube8-datacenter-app has 8 new findings discovered during continuous monitoring.

id source package
CVE-2021-35515 anchore_cve commons_compress-1.20
CVE-2021-35515 anchore_cve commons_compress-1.20
CVE-2021-35516 anchore_cve commons_compress-1.20
CVE-2021-35516 anchore_cve commons_compress-1.20
CVE-2021-35517 anchore_cve commons_compress-1.20
CVE-2021-35517 anchore_cve commons_compress-1.20
CVE-2021-36090 anchore_cve commons_compress-1.20
CVE-2021-36090 anchore_cve commons_compress-1.20

More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/sonarsource/sonarqube/sonarqube8-datacenter-app/-/jobs/6069606

Definition of Done

Justifications:

  • All findings have been justified
  • Justifications have been provided to the container hardening team

Approval Process:

  • Findings Approver has reviewed and approved all justifications
  • Approval request has been sent to Authorizing Official
  • Approval request has been processed by Authorizing Official