Resmanagement commons-beanutils vulnerability fix

Excluded common-beanutil from its parent jar
and included explicitly

Change-Id: I752ab71686e7b6527d9ded5d8eeb223049c083e0
Issue-ID: VFC-1598
Signed-off-by: Prakash.E <prakash.e@huawei.com>

diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml
index 077ff61..0337897 100644 (file)
--- a/ResmanagementService/service/pom.xml
+++ b/ResmanagementService/service/pom.xml
@@ -87,8 +87,17 @@
                     <groupId>commons-collections</groupId>
                     <artifactId>commons-collections</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-beanutils</groupId>
+                    <artifactId>commons-beanutils</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <groupId>commons-beanutils</groupId>
+            <artifactId>commons-beanutils</artifactId>
+            <version>1.9.4</version>
+        </dependency>
         <dependency>
             <groupId>org.eclipse.jetty.orbit</groupId>
             <artifactId>javax.servlet</artifactId>