Threats affecting pkg:maven/org.apache.tomee/openejb-ejbd

Apache TomEE versions from 4.0.0-beta-1 through 4.7.5, 7.0.0-M1 through 10.0.0-M1, 10.0.0-M1 through 10.3.0, and 11.0.0-M1 through 11.0.0-M2 contain a vulnerability where the EJBd remote protocol exposes datasource connection details, including database credentials, to remote clients. This allows remote clients with access to the EJBd endpoint to retrieve database credentials and connect directly to the database. The issue is fixed in Apache TomEE versions 10.3.0 and 11.0.0-M2.