Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 13 min 169 bronnen 43 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2018-19361

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-502

Beschrijving

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Vendors

Fasterxml Debian Oracle Redhat

Affected products

Jackson-databind Debian Linux Business Process Management Suite Primavera P6 Enterprise Project Portfolio Management Primavera Unifier Retail Workforce Management Software Webcenter Portal Automation Manager Decision Manager Jboss Bpm Suite Jboss Brms Openshift Container Platform

References