CVE-2019-14540

CRITICAL9.8Insecure deserialization

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Debian / debian_linux8.0 – 8.0
Debian / debian_linux10.0 – 10.0
Debian / debian_linux9.0 – 9.0
FasterXML / jackson-databind2.0.0 – 2.6.7.3
fedoraproject / fedora30 – 30
fedoraproject / fedora31 – 31
NetApp / oncommand_api_services
NetApp / OnCommand Workflow Automation
NetApp / steelstore_cloud_integrated_storage
oracle / banking_platform2.7.1 – 2.7.1
oracle / banking_platform2.6.1 – 2.6.1
oracle / banking_platform2.7.0 – 2.7.0
oracle / banking_platform2.4.0 – 2.4.0
oracle / banking_platform2.4.1 – 2.4.1
oracle / banking_platform2.5.0 – 2.5.0
oracle / banking_platform2.6.0 – 2.6.0
oracle / customer_management_and_segmentation_foundation18.0 – 18.0
oracle / financial_services_analytical_applications_infrastructure8.0.2 – 8.0.8
oracle / global_lifecycle_management_opatch11.2.0.3.23
oracle / goldengate_application_adapters19.1.0.0.0 – 19.1.0.0.0
oracle / goldengate_stream_analytics19.1.0.0.1
oracle / mysql5.7.0 – 5.7.30
oracle / primavera_gateway18.8.8.1 – 18.8.8.1
oracle / primavera_gateway15.2 – 15.2
oracle / primavera_gateway15.2.18 – 15.2.18
oracle / primavera_gateway16.2 – 16.2
oracle / primavera_gateway16.2.11 – 16.2.11
oracle / primavera_gateway17.12 – 17.12
oracle / primavera_gateway18.8.0 – 18.8.0
oracle / primavera_gateway17.12.6 – 17.12.6
oracle / primavera_unifier18.8 – 18.8
oracle / primavera_unifier19.12 – 19.12
oracle / primavera_unifier17.7 – 17.12
oracle / primavera_unifier16.1 – 16.1
oracle / primavera_unifier16.2 – 16.2
oracle / retail_customer_management_and_segmentation_foundation17.0 – 17.0
oracle / retail_xstore_point_of_service16.0 – 16.0
oracle / retail_xstore_point_of_service18.0 – 18.0
oracle / retail_xstore_point_of_service7.1 – 7.1
oracle / retail_xstore_point_of_service15.0 – 15.0
oracle / retail_xstore_point_of_service17.0 – 17.0
oracle / weblogic_server12.2.1.3.0 – 12.2.1.3.0
RedHat / jboss_enterprise_application_platform7.2 – 7.2
RedHat / jboss_enterprise_application_platform7.3 – 7.3

References

Updated 21m ago · 8 sources