Lucene search
K

6 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2020/12/09 4:30 p.m.35 views

Security Bulletin: Potential vulnerability with FasterXML jackson-databind

Summary A potential vulnerability has been identified related to FasterXML jackson-databind. Refer to details for additional information. Vulnerability Details CVEID: CVE-2020-24616 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caus...

8.1CVSS3.5AI score0.02908EPSS
Exploits1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.1 views

The vulnerability of the br.com.anteros.dbcp.AnterosDBCPDataSource component in the FasterXML jackson-databind library allows a attacker to compromise data integrity, gain access to confidential data, and cause service interruptions.

The vulnerability of the br.com.anteros.dbcp.AnterosDBCPDataSource component from the FasterXML library, within the jackson-databind library, is related to errors in code generation management. Exploiting this vulnerability may allow an attacker to compromise data integrity, gain access to...

8.1CVSS0.02908EPSS
Exploits1References10Affected Software11
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/09 1:20 p.m.32 views

Security Bulletin: Vulnerability in jackson-databind shipped with IBM Cloud Pak System

Summary Vulnerabilitiy identified in jackson-databind shipped with IBM Cloud Pak System. IBM Clous Pak System addresssed vulnerabilities. Vulnerability Details CVEID: CVE-2020-24616 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caus...

8.1CVSS1.2AI score0.02908EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/08/25 6:15 p.m.22 views

CVE-2020-24616

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource aka Anteros-DBCP...

8.1CVSS6.5AI score
Exploits0References10
NVD
NVD
added 2020/08/25 6:15 p.m.19 views

CVE-2020-24616

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource aka Anteros-DBCP...

8.1CVSS8.7AI score0.02908EPSS
Exploits1References10
Cvelist
Cvelist
added 2020/08/25 5:4 p.m.32 views

CVE-2020-24616

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource aka Anteros-DBCP...

8.7AI score0.02908EPSS
Exploits1References10
Rows per page
Query Builder