NetSight
IP …
critical9.8

CVE-2019-16335

Polymorphic Typing issue in FasterXML jackson-databind

Impact

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10, 2.8.11.5, and 2.6.7.3. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

Affected packages

EcosystemPackageAffectedFixed in
mavencom.fasterxml.jackson.core:jackson-databind>= 2.9.0, < 2.9.102.9.10

Affected products

VendorProductAffected versions
FasterxmlJackson-Databind
from 2.0.0 before 2.6.7.3
from 2.7.0 before 2.8.11.5
from 2.9.0 before 2.9.10
FedoraprojectFedora
Versions 30, 31
DebianDebian Linux
Versions 8.0, 9.0, 10.0
NetappOncommand Api Services
All versions
NetappOncommand Workflow Automation
All versions
NetappSteelstore Cloud Integrated Storage
All versions
RedhatJboss Enterprise Application Platform
Versions 7.2, 7.3
OracleBanking Platform
Versions 2.4.0, 2.4.1, 2.5.0, 2.6.0, 2.6.1, 2.7.0
OracleCustomer Management And Segmentation Foundation
Version 18.0
OracleFinancial Services Analytical Applications Infrastructure
from 8.0.2 through 8.0.8
OracleGlobal Lifecycle Management Opatch
before 11.2.0.3.23
from 12.2.0.1.0 before 12.2.0.1.19
from 13.9.4.0.0 before 13.9.4.2.1
OracleGoldengate Application Adapters
Version 19.1.0.0.0

Weakness classification

CWE-502

References