Vulnerability Database
296,138
Total vulnerabilities in the database
CVE-2014-3558
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
| Software | From | Fixed in |
|---|---|---|
| redhat / hibernate_validator | 4.1.0 | 4.1.0.x |
| redhat / hibernate_validator | 4.2.0 | 4.2.0.x |
| redhat / hibernate_validator | 4.2.0-beta1 | 4.2.0-beta1.x |
| redhat / hibernate_validator | 4.2.0-beta2 | 4.2.0-beta2.x |
| redhat / hibernate_validator | 4.2.0-cr1 | 4.2.0-cr1.x |
| redhat / hibernate_validator | 4.3.0 | 4.3.2 |
| redhat / hibernate_validator | 5.0.0 | 5.0.3.x |
| redhat / hibernate_validator | 5.1.0 | 5.1.2 |
org.hibernate / hibernate-validator
|
4.1.0 | 4.2.1 |
|
org.hibernate / hibernate-validator
|
4.3.0 | 4.3.2 |
|
org.hibernate / hibernate-validator
|
5.0.0 | 5.1.2 |
- http://rhn.redhat.com/errata/RHSA-2014-1285.html
- http://rhn.redhat.com/errata/RHSA-2014-1286.html
- http://rhn.redhat.com/errata/RHSA-2014-1287.html
- http://rhn.redhat.com/errata/RHSA-2014-1288.html
- http://rhn.redhat.com/errata/RHSA-2015-0125.html
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
- https://hibernate.atlassian.net/browse/HV-912