NetSight
IP …
medium5.0

CVE-2014-3558

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows att…

Impact

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

Affected products

VendorProductAffected versions
RedhatHibernate Validator
from 4.3.0 before 4.3.2
from 5.0.0 through 5.0.3
from 5.1.0 before 5.1.2
Versions 4.1.0, 4.2.0

Weakness classification

CWE-264

References