ByteOS Network

Vulnerability Details :

CVE-2018-19360

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-02 Jan, 2019 | 18:00

Updated At-05 Aug, 2024 | 11:37

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:02 Jan, 2019 | 18:00

Updated At:05 Aug, 2024 | 11:37

▼CVE Numbering Authority (CNA)

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/FasterXML/jackson-databind/issues/2186	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html	mailing-list x_refsource_MLIST
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8	x_refsource_CONFIRM
https://issues.apache.org/jira/browse/TINKERPOP-2121	x_refsource_CONFIRM
https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b	x_refsource_CONFIRM
https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E	mailing-list x_refsource_MLIST
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:0782	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:0877	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHBA-2019:0959	vendor-advisory x_refsource_REDHAT
https://www.debian.org/security/2019/dsa-4452	vendor-advisory x_refsource_DEBIAN
https://seclists.org/bugtraq/2019/May/68	mailing-list x_refsource_BUGTRAQ
https://security.netapp.com/advisory/ntap-20190530-0003/	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:1782	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1797	vendor-advisory x_refsource_REDHAT
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
http://www.securityfocus.com/bid/107985	vdb-entry x_refsource_BID
https://access.redhat.com/errata/RHSA-2019:1822	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1823	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2804	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2858	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3002	vendor-advisory x_refsource_REDHAT
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:3140	vendor-advisory x_refsource_REDHAT
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:3149	vendor-advisory x_refsource_REDHAT
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:3892	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4037	vendor-advisory x_refsource_REDHAT
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E	mailing-list x_refsource_MLIST
https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E	mailing-list x_refsource_MLIST

Hyperlink: https://github.com/FasterXML/jackson-databind/issues/2186

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8

Resource:

x_refsource_CONFIRM

Hyperlink: https://issues.apache.org/jira/browse/TINKERPOP-2121

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Resource:

x_refsource_MISC

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0782

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0877

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHBA-2019:0959

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.debian.org/security/2019/dsa-4452

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://seclists.org/bugtraq/2019/May/68

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://security.netapp.com/advisory/ntap-20190530-0003/

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1782

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1797

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Resource:

x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/107985

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1822

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1823

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2804

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2858

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3002

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Resource:

x_refsource_MISC

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3140

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3149

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3892

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:4037

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.oracle.com/security-alerts/cpuapr2020.html

Resource:

x_refsource_MISC

Hyperlink: https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/FasterXML/jackson-databind/issues/2186	x_refsource_CONFIRM x_transferred
https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html	mailing-list x_refsource_MLIST x_transferred
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8	x_refsource_CONFIRM x_transferred
https://issues.apache.org/jira/browse/TINKERPOP-2121	x_refsource_CONFIRM x_transferred
https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b	x_refsource_CONFIRM x_transferred
https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC x_transferred
https://access.redhat.com/errata/RHSA-2019:0782	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:0877	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHBA-2019:0959	vendor-advisory x_refsource_REDHAT x_transferred
https://www.debian.org/security/2019/dsa-4452	vendor-advisory x_refsource_DEBIAN x_transferred
https://seclists.org/bugtraq/2019/May/68	mailing-list x_refsource_BUGTRAQ x_transferred
https://security.netapp.com/advisory/ntap-20190530-0003/	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2019:1782	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1797	vendor-advisory x_refsource_REDHAT x_transferred
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC x_transferred
http://www.securityfocus.com/bid/107985	vdb-entry x_refsource_BID x_transferred
https://access.redhat.com/errata/RHSA-2019:1822	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:1823	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:2804	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:2858	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:3002	vendor-advisory x_refsource_REDHAT x_transferred
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC x_transferred
https://access.redhat.com/errata/RHSA-2019:3140	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2019:3149	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2019:3892	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:4037	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC x_transferred
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E	mailing-list x_refsource_MLIST x_transferred

Hyperlink: https://github.com/FasterXML/jackson-databind/issues/2186

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://issues.apache.org/jira/browse/TINKERPOP-2121

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0782

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0877

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHBA-2019:0959

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://www.debian.org/security/2019/dsa-4452

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://seclists.org/bugtraq/2019/May/68

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20190530-0003/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1782

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1797

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/bid/107985

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1822

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1823

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2804

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2858

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3002

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3140

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3149

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3892

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:4037

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://www.oracle.com/security-alerts/cpuapr2020.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:02 Jan, 2019 | 18:29

Updated At:07 Nov, 2023 | 02:55

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

FasterXML, LLC.

>>jackson-databind>>Versions from 2.6.0(inclusive) to 2.6.7.2(inclusive)

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

FasterXML, LLC.

>>jackson-databind>>Versions from 2.7.0(inclusive) to 2.7.9.5(exclusive)

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

FasterXML, LLC.

>>jackson-databind>>Versions from 2.8.0(inclusive) to 2.8.11.3(exclusive)

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

FasterXML, LLC.

>>jackson-databind>>Versions from 2.9.0(inclusive) to 2.9.8(exclusive)

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Oracle Corporation

>>business_process_management_suite>>12.1.3.0.0

cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>business_process_management_suite>>12.2.1.3.0

cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>Versions from 17.7(inclusive) to 17.12(inclusive)

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>15.1

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>15.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>16.1

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>16.2

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_p6_enterprise_project_portfolio_management>>18.8

cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_unifier>>Versions from 17.7(inclusive) to 17.12(inclusive)

cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_unifier>>16.1

cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_unifier>>16.2

cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*

Oracle Corporation

>>primavera_unifier>>18.8

cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*

Oracle Corporation

>>retail_workforce_management_software>>1.60.9.0.0

cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>webcenter_portal>>12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>automation_manager>>7.3.1

cpe:2.3:a:redhat:automation_manager:7.3.1:*:*:*:*:*:*:*

Red Hat, Inc.

>>decision_manager>>7.3.1

cpe:2.3:a:redhat:decision_manager:7.3.1:*:*:*:*:*:*:*

Red Hat, Inc.

>>jboss_bpm_suite>>6.4.11

cpe:2.3:a:redhat:jboss_bpm_suite:6.4.11:*:*:*:*:*:*:*

Red Hat, Inc.

>>jboss_brms>>6.4.10

cpe:2.3:a:redhat:jboss_brms:6.4.10:*:*:*:*:*:*:*

Red Hat, Inc.

>>openshift_container_platform>>3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-502	Primary	nvd@nist.gov

CWE ID: CWE-502

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/107985	cve@mitre.org	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHBA-2019:0959	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0782	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0877	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1782	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1797	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1822	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1823	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2804	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:2858	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:3002	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:3140	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:3149	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:3892	cve@mitre.org	N/A
https://access.redhat.com/errata/RHSA-2019:4037	cve@mitre.org	N/A
https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b	cve@mitre.org	Patch Third Party Advisory
https://github.com/FasterXML/jackson-databind/issues/2186	cve@mitre.org	Issue Tracking Patch Third Party Advisory
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8	cve@mitre.org	Patch Release Notes Third Party Advisory
https://issues.apache.org/jira/browse/TINKERPOP-2121	cve@mitre.org	Issue Tracking Third Party Advisory
https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E	cve@mitre.org	N/A
https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E	cve@mitre.org	N/A
https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html	cve@mitre.org	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/May/68	cve@mitre.org	Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20190530-0003/	cve@mitre.org	Third Party Advisory
https://www.debian.org/security/2019/dsa-4452	cve@mitre.org	Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	cve@mitre.org	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	cve@mitre.org	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	cve@mitre.org	Patch Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	cve@mitre.org	N/A