NetSight
IP …
high8.1

CVE-2021-20190

A flaw was found in jackson-databind before 2.9.10.7.

Impact

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products

VendorProductAffected versions
FasterxmlJackson-Databind
before 2.6.7.5
from 2.7.0 before 2.9.10.7
NetappActive Iq Unified Manager
All versions
NetappOncommand Api Services
All versions
NetappOncommand Insight
All versions
NetappService Level Manager
All versions
ApacheNifi
from 1.7.0 through 1.12.1
DebianDebian Linux
Version 9.0
OracleCommerce Experience Manager
Version 11.3.2
OracleCommerce Guided Search
Version 11.3.2

Weakness classification

CWE-502

References