CVE-2019-12017

A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login and ticket issuance. An attacker can use the 'class' property of the JSON request sent to the CLDB to influence the JSON library's decision on which...

CVE-2019-12017

CVE-2019-12017 describes a remote code execution in MapR CLDB. An attacker could exploit the CLDB’s JSON handling by manipulating the JSON request’s class property, causing the deserializer to load a malicious Java class via a remote URLClassLoader and instantiate it in CLDB. This leads to arbitr...