CVE-2019-16335

CRITICAL9.8Insecure deserialization

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Debian / debian_linux8.0 – 8.0
Debian / debian_linux10.0 – 10.0
Debian / debian_linux9.0 – 9.0
FasterXML / jackson-databind2.0.0 – 2.6.7.3
fedoraproject / fedora31 – 31
fedoraproject / fedora30 – 30
NetApp / oncommand_api_services
NetApp / OnCommand Workflow Automation
NetApp / steelstore_cloud_integrated_storage
oracle / banking_platform2.7.1 – 2.7.1
oracle / banking_platform2.4.0 – 2.4.0
oracle / banking_platform2.4.1 – 2.4.1
oracle / banking_platform2.5.0 – 2.5.0
oracle / banking_platform2.6.0 – 2.6.0
oracle / banking_platform2.6.1 – 2.6.1
oracle / banking_platform2.7.0 – 2.7.0
oracle / customer_management_and_segmentation_foundation18.0 – 18.0
oracle / financial_services_analytical_applications_infrastructure8.0.2 – 8.0.8
oracle / global_lifecycle_management_opatch11.2.0.3.23
oracle / goldengate_application_adapters19.1.0.0.0 – 19.1.0.0.0
oracle / goldengate_stream_analytics19.1.0.0.1
oracle / primavera_gateway16.2 – 16.2
oracle / primavera_gateway18.8.0 – 18.8.0
oracle / primavera_gateway17.7 – 17.12
oracle / primavera_gateway15.2 – 15.2
oracle / primavera_gateway16.1 – 16.1
oracle / retail_customer_management_and_segmentation_foundation17.0 – 17.0
oracle / retail_xstore_point_of_service18.0 – 18.0
oracle / retail_xstore_point_of_service15.0 – 15.0
oracle / retail_xstore_point_of_service16.0 – 16.0
oracle / retail_xstore_point_of_service17.0 – 17.0
oracle / retail_xstore_point_of_service7.1 – 7.1
oracle / weblogic_server12.2.1.3.0 – 12.2.1.3.0
RedHat / jboss_enterprise_application_platform7.2 – 7.2
RedHat / jboss_enterprise_application_platform7.3 – 7.3

References

Updated 21m ago · 8 sources