The vulnerability of the br.com.anteros.dbcp.AnterosDBCPDataSource component in the FasterXML jackson-databind library allows a attacker to compromise data integrity, gain access to confidential data, and cause service interruptions.

🗓️ 22 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

AnterosDBCPDataSource vulnerability in jackson-databind risks data integrity, data exposure, and service disruption.

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has patched several open source dependencies	18 Dec 202115:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects IBM Process Mining (Multiple CVEs)	1 Feb 202321:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs affect IBM Integration Designer	1 Feb 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind shipped with IBM Cloud Pak System	9 Sep 202013:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Jackson, jQuery, and Dom4j affect IBM Spectrum Copy Data Management	10 Dec 202123:20	–	ibm
IBM Security Bulletins	Security Bulletin: Jackson-Databind Vulnerabilities Affect the B2B API of IBM Sterling B2B Integrator	6 Oct 202114:34	–	ibm
IBM Security Bulletins	Security Bulletin: jackson-databind vulnerability CVE-2020-24616 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0	8 Dec 202018:53	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by multiple vulnerabilities in the jackson-databind, jackson-dataformat-xml, jackson-core, slf4j-ext, and cxf-core packages	10 Oct 202222:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus	20 Nov 202020:41	–	ibm

Vulners

Node

red_hat openshift_container_platformMatch3.11

OR

red_hat red_hat_satelliteMatch6.0

OR

red_hat jboss_enterprise_application_platformMatch7

OR

red_hat openshift_container_platformMatch4

OR

oracle oracle_agile_plmMatch9.3.6

OR

fasterxml,_llc jackson-databindRange2.0.0–2.9.10.6

OR

oracle oracle_communications_diameter_signaling_router_(dsr)_idihRange8.0.0–8.2.2

OR

red_hat red_hat_enterprise_linuxMatch8

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2020090706
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-24616
access	www.access.redhat.com/security/cve/cve-2020-24616
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-24616
github	www.github.com/FasterXML/jackson-databind/issues/2814
oracle	www.oracle.com/security-alerts/cpujan2021.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2629
web	www.web.nvd.nist.gov/view/vuln/detail

05 Mar 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.6

CVSS 38.1

EPSS0.09346

AnterosDBCPDataSource JacksonDatabind CodeGenerationManagement DataIntegrity DataDisclosure ServiceDisruption