Lucene search
Redhat.comRH:CVE-2019-12814HistoryApr 09, 2020 - 10:54 a.m.
CVE-2019-12814
2020-04-0910:54:13
redhat.com
access.redhat.com
11
0.015 Low
EPSS
Percentile
87.2%
A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x through 2.9.9. With default typing enabled, an attacker can send a specifically crafted JSON message to the server that allows them to read arbitrary local files.
Mitigation
This vulnerability relies on jdom (org.jdom) or jdom2 (org.jdom2) being present in the application's ClassPath. Applications using jackson-databind that do not also use jdom or jdom2 are not impacted by this vulnerability.
Related
osv
osv
CVE-2019-12814
2019-06-19 14:15:10
Deserialization of untrusted data in FasterXML jackson-databind
2019-07-17 15:26:12
jackson-databind - security update
2019-06-21 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Jackson-Databind Affects IBM Global High Availability Mailbox (CVE-2019-12814)
2019-10-09 19:43:08
cvelist
cvelist
CVE-2019-12814
2019-06-19 13:24:44
symantec
symantec
github
github
Deserialization of untrusted data in FasterXML jackson-databind
2019-07-17 15:26:12
cve
cve
CVE-2019-12814
2019-06-19 14:15:10
prion
prion
Code injection
2019-06-19 14:15:00
ubuntucve
ubuntucve
CVE-2019-12814
2019-06-19 00:00:00
debiancve
debiancve
CVE-2019-12814
2019-06-19 14:15:10
nvd
nvd
CVE-2019-12814
2019-06-19 14:15:10
veracode
veracode
Deserialization Of Untrusted Object
2019-06-17 06:47:14
debian
debian
[SECURITY] [DLA 1831-1] jackson-databind security update
2019-06-21 15:09:36
nessus
nessus
Debian DLA-1831-1 : jackson-databind security update
2019-06-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1831-1)
2019-06-22 00:00:00
Fedora Update for jackson-core FEDORA-2019-fb23eccc03
2019-09-23 00:00:00
Fedora Update for jackson-annotations FEDORA-2019-99ff6aa32c
2020-01-09 00:00:00
rocky
rocky
pki-core:10.6 and pki-deps:10:6 bug fix and enhancement update
2019-11-05 17:43:24
redhat
redhat
fedora
fedora
[SECURITY] Fedora 31 Update: jackson-bom-2.9.9-1.fc31
2019-09-18 00:07:22
[SECURITY] Fedora 31 Update: jackson-core-2.9.9-1.fc31
2019-09-18 00:07:22
[SECURITY] Fedora 30 Update: jackson-databind-2.9.9.3-1.fc30
2019-09-22 02:26:43
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2021-03-27 17:27:02
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00