İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Kritik CVSS 9.8

CVE-2019-17267: Jackson-databind: güvenilmeyen verinin serileştirmeden çıkarılması

Yayın: · Güncelleme:

Açıklama (NVD)

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

Özet bilgiler

Ürün
Fasterxml Jackson-databind
CVSS v3.1
9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
%4,63 (yüzdelik 92)
CWE
CWE-502
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
fasterxml-jackson-databind2.0.0—2.8.11.5
fasterxml-jackson-databind2.9.0—2.9.10
netapp-active-iq-unified-manager7.3——
netapp-active-iq-unified-manager7.3——
netapp-active-iq-unified-manager9.5——
netapp-oncommand-api-services———
netapp-oncommand-workflow-automation———
netapp-service-level-manager———
netapp-steelstore-cloud-integrated-storage———
debian-debian-linux8.08.0—
redhat-jboss-enterprise-application-platform7.27.2—
redhat-jboss-enterprise-application-platform7.37.3—
oracle-customer-management-and-segmentation-foundation——18.0
oracle-goldengate-application-adapters19.1.0.0.019.1.0.0.0—
oracle-retail-customer-management-and-segmentation-foundation17.017.0—
oracle-weblogic-server12.2.1.3.012.2.1.3.0—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları