Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 1.2.8
Report Generated On: Jan 14, 2015 at 17:25:53 WET
Dependencies Scanned: 5
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
CurrentEngineRelease:
NVD CVE 2002: 10/01/2015 11:22:31
NVD CVE 2003: 10/01/2015 10:37:03
NVD CVE 2004: 10/01/2015 10:25:33
NVD CVE 2005: 10/01/2015 10:07:36
NVD CVE 2006: 14/11/2014 13:01:27
NVD CVE 2007: 22/08/2014 11:38:35
NVD CVE 2008: 11/01/2015 09:08:51
NVD CVE 2009: 10/01/2015 09:36:10
NVD CVE 2010: 10/01/2015 09:19:28
NVD CVE 2011: 12/01/2015 08:58:17
NVD CVE 2012: 12/01/2015 08:40:17
NVD CVE 2013: 14/01/2015 08:42:29
NVD CVE 2014: 14/01/2015 08:21:11
NVD CVE 2015: 14/01/2015 08:00:04
NVD CVE Modified: 14/01/2015 17:01:22
VersionCheckOn: 1421249347075

Display: Showing Vulnerable Dependencies

Dependency	CPE	GAV	CPE Confidence	Evidence Count
logback-classic-1.1.2.jar		ch.qos.logback:logback-classic:1.1.2		16
logback-core-1.1.2.jar		ch.qos.logback:logback-core:1.1.2		16
jsch-0.1.51.jar		com.jcraft:jsch:0.1.51		13
jzlib-1.1.2.jar	cpe:/a:jcraft:jzlib:1.1.2	com.jcraft:jzlib:1.1.2	LOW	11
slf4j-api-1.7.10.jar		org.slf4j:slf4j-api:1.7.10		13

Dependencies

logback-classic-1.1.2.jar

Description: logback-classic module

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/legal/epl-v10.html
GNU Lesser General Public License: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /opt/maven/repository/ch/qos/logback/logback-classic/1.1.2/logback-classic-1.1.2.jar
MD5: 0418F747DBDD3EF5CC5F5AA85629609D
SHA1: B316E9737EEA25E9DDD6D88EAEEE76878045C6B2

Evidence

Source	Name	Value
central	artifactid	logback-classic
central	groupid	ch.qos.logback
file	name	logback-classic-1.1.2
hint analyzer	product	springsource_spring_framework
hint analyzer	vendor	SpringSource
hint analyzer	vendor	vmware
jar	package name	ch
jar	package name	classic
jar	package name	logback
jar	package name	qos
manifest	Bundle-Description	logback-classic module
pom	artifactid	logback-classic
pom	description	logback-classic module
pom	groupid	ch.qos.logback
pom	name	Logback Classic Module
pom	parent-artifactid	logback-parent

Identifiers

maven: ch.qos.logback:logback-classic:1.1.2 Confidence:HIGHEST

logback-core-1.1.2.jar

Description: logback-core module

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/legal/epl-v10.html
GNU Lesser General Public License: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /opt/maven/repository/ch/qos/logback/logback-core/1.1.2/logback-core-1.1.2.jar
MD5: AE3B1F69540D87C5BB68260818764FE3
SHA1: 2D23694879C2C12F125DAC5076BDFD5D771CC4CB

Evidence

Source	Name	Value
central	artifactid	logback-core
central	groupid	ch.qos.logback
file	name	logback-core-1.1.2
hint analyzer	product	springsource_spring_framework
hint analyzer	vendor	SpringSource
hint analyzer	vendor	vmware
jar	package name	ch
jar	package name	core
jar	package name	logback
jar	package name	qos
manifest	Bundle-Description	logback-core module
pom	artifactid	logback-core
pom	description	logback-core module
pom	groupid	ch.qos.logback
pom	name	Logback Core Module
pom	parent-artifactid	logback-parent

Identifiers

maven: ch.qos.logback:logback-core:1.1.2 Confidence:HIGHEST

jsch-0.1.51.jar

Description: JSch is a pure Java implementation of SSH2

License:

Revised BSD: http://www.jcraft.com/jsch/LICENSE.txt

File Path: /opt/maven/repository/com/jcraft/jsch/0.1.51/jsch-0.1.51.jar
MD5: 6F94A6D5DAB69DCB0A75350382223AF6
SHA1: 6CEEE2696B07CC320D0E1AAEA82C7B40768ACA0F

Evidence

Source	Name	Value
central	artifactid	jsch
central	groupid	com.jcraft
file	name	jsch-0.1.51
jar	package name	io
jar	package name	jcraft
jar	package name	jsch
pom	artifactid	jsch
pom	description	JSch is a pure Java implementation of SSH2
pom	groupid	com.jcraft
pom	name	JSch
pom	organization name	JCraft,Inc.
pom	parent-artifactid	oss-parent
pom	parent-groupid	org.sonatype.oss

Identifiers

maven: com.jcraft:jsch:0.1.51 Confidence:HIGHEST

jzlib-1.1.2.jar

Description: JZlib is a re-implementation of zlib in pure Java

License:

Revised BSD: http://www.jcraft.com/jzlib/LICENSE.txt

File Path: /opt/maven/repository/com/jcraft/jzlib/1.1.2/jzlib-1.1.2.jar
MD5: F0C186B079737A61DE9E8459A3637A4B
SHA1: A7D1993E6362271999BE944B143352825CB5D966

Evidence

Source	Name	Value
central	artifactid	jzlib
central	groupid	com.jcraft
central	version	1.1.2
file	name	1.1.2
file	name	jzlib-1.1.2
jar	package name	jcraft
jar	package name	jzlib
pom	artifactid	jzlib
pom	groupid	com.jcraft
pom	parent-version	1.1.2
pom	version	1.1.2

Identifiers

maven: com.jcraft:jzlib:1.1.2 Confidence:HIGHEST
cpe: cpe:/a:jcraft:jzlib:1.1.2 Confidence:LOW

slf4j-api-1.7.10.jar

Description: The slf4j API

File Path: /opt/maven/repository/org/slf4j/slf4j-api/1.7.10/slf4j-api-1.7.10.jar
MD5: 3459BDFBE4A9ABED1B5B32D2E0C520EE
SHA1: 5B338F206827D88ACD890739F400A9B7664E5984

Evidence

Source	Name	Value
central	artifactid	slf4j-api
central	groupid	org.slf4j
file	name	slf4j-api-1.7.10
hint analyzer	product	springsource_spring_framework
hint analyzer	vendor	SpringSource
hint analyzer	vendor	vmware
jar	package name	slf4j
manifest	Bundle-Description	The slf4j API
pom	artifactid	slf4j-api
pom	description	The slf4j API
pom	groupid	org.slf4j
pom	name	SLF4J API Module
pom	parent-artifactid	slf4j-parent

Identifiers

maven: org.slf4j:slf4j-api:1.7.10 Confidence:HIGHEST

Dependency-Check Report

Project: JDBC SSH

Dependencies

logback-classic-1.1.2.jar

Evidence

Identifiers

logback-core-1.1.2.jar

Evidence

Identifiers

jsch-0.1.51.jar

Evidence

Identifiers

jzlib-1.1.2.jar

Evidence

Identifiers

slf4j-api-1.7.10.jar

Evidence

Identifiers