NetSight
IP …
critical9.8

CVE-2019-17267

Improper Input Validation in jackson-databind

Impact

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 and 2.8.11.5. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

Affected packages

EcosystemPackageAffectedFixed in
mavencom.fasterxml.jackson.core:jackson-databind>= 2.9.0, < 2.9.102.9.10

Affected products

VendorProductAffected versions
FasterxmlJackson-Databind
from 2.0.0 before 2.8.11.5
from 2.9.0 before 2.9.10
NetappActive Iq Unified Manager
from 7.3
from 9.5
NetappOncommand Api Services
All versions
NetappOncommand Workflow Automation
All versions
NetappService Level Manager
All versions
NetappSteelstore Cloud Integrated Storage
All versions
DebianDebian Linux
Version 8.0
RedhatJboss Enterprise Application Platform
Versions 7.2, 7.3
OracleCustomer Management And Segmentation Foundation
before 18.0
OracleGoldengate Application Adapters
Version 19.1.0.0.0
OracleRetail Customer Management And Segmentation Foundation
Version 17.0
OracleWeblogic Server
Version 12.2.1.3.0

Weakness classification

CWE-502

References