CVE-2019-17267 | SynScan

Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2019-17267

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

Published: Oct 7, 2019
Updated: Sep 14, 2023
CVE: CVE-2019-17267
GHSA: GHSA-f3j5-rmmp-3fc5
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-502

OWASP TOP 10:

A8 - Insecure Deserialization

Affected Software
References

Software	From	Fixed in
fasterxml / jackson-databind	2.9.0	2.9.10
netapp / active_iq_unified_manager	7.3	7.3.x
netapp / active_iq_unified_manager	9.5	9.5.x
debian / debian_linux	8.0	8.0.x
redhat / jboss_enterprise_application_platform	7.2	7.2.x
redhat / jboss_enterprise_application_platform	7.3	7.3.x
oracle / weblogic_server	12.2.1.3.0	12.2.1.3.0.x
oracle / retail_customer_management_and_segmentation_foundation	17.0	17.0.x
oracle / goldengate_application_adapters	19.1.0.0.0	19.1.0.0.0.x
oracle / customer_management_and_segmentation_foundation	-	18.0
com.fasterxml.jackson.core / jackson-databind	-	2.9.10
fasterxml / jackson-databind	2.0.0	2.8.11.5