CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

EUVD-2020-0438

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

CVE-2020-9548

CVE-2020-9548 affects Cloudera Data Platform Private Cloud Base (IBM) 7.1.9. It is a deserialization vulnerability in FasterXML jackson-databind 2.x up to 2.9.10.3/4 where interaction between serialization gadgets and typing (relating to br.com.anteros.dbcp.AnterosDBCPConfig) can lead to remote c...

PT-2020-4105

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.9.10 and 2.10.0 Description: A flaw in FasterXML jackson-databind allows polymorphic deserialization of malicious objects using the xalan JNDI gadget when used with polymorphic type handling...

PT-2020-3305

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.7.9.6 and earlier, 2.8.11.5 and earlier, 2.9.10.3 and earlier Description The issue is related to the interaction between serialization gadgets and typing in the FasterXML jackson-databind library,...

PT-2020-3306 · Fasterxml +7 · Jackson-Databind +7

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.9.10.4 jackson-databind versions 2.7.9.7 and earlier jackson-databind versions 2.8.11.6 and earlier debian debian linux, fasterxml jackson-databind, netapp active iq unified manager, oracle autov...

Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind

CVE-2020-8840: FasterXML/jackson-databind remote code executio...

CVE-2018-1000873

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service DoS. This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the...

FasterXML jackson-databind Remote Code Execution Vulnerability

FasterXML jackson-databind is a simple Java-based application library , Jackson can easily convert Java objects into json objects and xml documents , the same can be json, xml into Java objects . A remote code execution vulnerability exists in FasterXML jackson-databind. The vulnerability hi due ...

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis allows a attacker to gain full control over the system.

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis is related to the lack of a mechanism for checking input data. Exploiting this vulnerability could allow an attacker to gain full control over the system...

Debian DLA-2111-1 : jackson-databind security update

It was found that jackson-databind, a Java library used to parse JSON and other data formats, could deserialize data without proper validation, allowing a maliciously client to perform remote code execution on a service with the required characteristics. For Debian 8 'Jessie', these problems have...

Security Bulletin: Multiple vulnerabilities in FasterXML Jackson-databind affect IBM Spectrum Protect Plus (CVE-2019-16943, CVE-2019-16942, CVE-2019-17531, CVE-2019-17267, CVE-2019-14540, CVE-2019-16335, CVE-2019-14379, CVE-2019-14439)

Summary There are multiple security vulnerabilities in FasterXML Jackson-databind that affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2019-16943 DESCRIPTION: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is...

Debian: Security Advisory (DLA-2111-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2111-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u11 CVE ID : CVE-2019-20330 CVE-2020-8840 It was found that jackson-databind, a Java library used to parse JSON and other data formats, could deserialize data without proper validation, allowing a maliciously client to perform remote code execution...

DLA-2111-1 jackson-databind - security update

Bulletin has no description...

Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK Java (February 2020 Bulletin)

Summary Security vulnerability affects IBM Cloud Object Storage SDK Java. The vulnerability has been addressed in the latest SDK 2.6.1 release. Vulnerability Details CVEID: CVE-2019-20330 DESCRIPTION: A lacking of certain net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact...