ID CVE-2018-12022
Summary An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.
References
Vulnerable Configurations
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:-:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:-:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.1-1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.7.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.9:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.9:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.10:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.10:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.11:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.11:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.8.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:-:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:-:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease1:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease2:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease3:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease3:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease4:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.0:prerelease4:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:fasterxml:jackson-databind:2.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:fasterxml:jackson-databind:2.9.5:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:retail_merchandising_system:15.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:automation_manager:7.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:automation_manager:7.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:decision_manager:7.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:decision_manager:7.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_brms:6.4.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_brms:6.4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:single_sign-on:7.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:single_sign-on:7.3:*:*:*:*:*:*:*
CVSS
Base: 5.1 (as of 20-10-2020 - 22:15)
Impact:
Exploitability:
CWE CWE-502
CAPEC
  • Object Injection
    An adversary attempts to exploit an application by injecting additional, malicious content during its processing of serialized objects. Developers leverage serialization in order to convert data or state into a static, binary format for saving to disk or transferring over a network. These objects are then deserialized when needed to recover the data/state. By injecting a malformed object into a vulnerable application, an adversary can potentially compromise the application by manipulating the deserialization process. This can result in a number of unwanted outcomes, including remote code execution.
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • rhsa
    id RHBA-2019:0959
  • rhsa
    id RHSA-2019:0782
  • rhsa
    id RHSA-2019:0877
  • rhsa
    id RHSA-2019:1106
  • rhsa
    id RHSA-2019:1107
  • rhsa
    id RHSA-2019:1108
  • rhsa
    id RHSA-2019:1140
  • rhsa
    id RHSA-2019:1782
  • rhsa
    id RHSA-2019:1797
  • rhsa
    id RHSA-2019:1822
  • rhsa
    id RHSA-2019:1823
  • rhsa
    id RHSA-2019:2804
  • rhsa
    id RHSA-2019:2858
  • rhsa
    id RHSA-2019:3002
  • rhsa
    id RHSA-2019:3140
  • rhsa
    id RHSA-2019:3149
  • rhsa
    id RHSA-2019:3892
  • rhsa
    id RHSA-2019:4037
rpms
  • rh-maven35-jackson-databind-0:2.7.6-2.5.el7
  • rh-maven35-jackson-databind-javadoc-0:2.7.6-2.5.el7
  • eap7-activemq-artemis-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-cli-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-commons-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-core-client-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-dto-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-hornetq-protocol-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-hqclient-protocol-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-jdbc-store-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-jms-client-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-jms-server-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-journal-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-native-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-ra-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-selector-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-server-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-service-extensions-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-activemq-artemis-tools-0:2.6.3-5.redhat_00020.1.el6eap
  • eap7-apache-commons-lang-0:3.8.0-1.redhat_00001.1.el6eap
  • eap7-apache-cxf-0:3.2.7-1.redhat_00001.1.el6eap
  • eap7-apache-cxf-rt-0:3.2.7-1.redhat_00001.1.el6eap
  • eap7-apache-cxf-services-0:3.2.7-1.redhat_00001.1.el6eap
  • eap7-apache-cxf-tools-0:3.2.7-1.redhat_00001.1.el6eap
  • eap7-apache-cxf-xjc-utils-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-artemis-native-0:2.6.3-15.redhat_00020.el6eap
  • eap7-artemis-native-wildfly-0:2.6.3-15.redhat_00020.el6eap
  • eap7-byte-buddy-0:1.9.5-1.redhat_00001.1.el6eap
  • eap7-cxf-xjc-boolean-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-cxf-xjc-bug986-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-cxf-xjc-dv-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-cxf-xjc-runtime-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-cxf-xjc-ts-0:3.2.3-2.redhat_00002.1.el6eap
  • eap7-dom4j-0:2.1.1-2.redhat_00001.1.el6eap
  • eap7-hibernate-0:5.3.9-2.Final_redhat_00002.1.el6eap
  • eap7-hibernate-core-0:5.3.9-2.Final_redhat_00002.1.el6eap
  • eap7-hibernate-entitymanager-0:5.3.9-2.Final_redhat_00002.1.el6eap
  • eap7-hibernate-envers-0:5.3.9-2.Final_redhat_00002.1.el6eap
  • eap7-hibernate-java8-0:5.3.9-2.Final_redhat_00002.1.el6eap
  • eap7-httpcomponents-asyncclient-0:4.1.4-1.redhat_00001.1.el6eap
  • eap7-infinispan-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-cachestore-jdbc-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-cachestore-remote-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-client-hotrod-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-commons-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-core-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-commons-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-spi-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-infinispan-hibernate-cache-v53-0:9.3.6-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-api-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-impl-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-common-spi-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-core-api-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-core-impl-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-deployers-common-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-jdbc-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-ironjacamar-validator-0:1.4.15-1.Final_redhat_00001.1.el6eap
  • eap7-istack-commons-runtime-0:3.0.7-2.redhat_00001.1.el6eap
  • eap7-istack-commons-tools-0:3.0.7-2.redhat_00001.1.el6eap
  • eap7-jackson-annotations-0:2.9.8-2.redhat_00004.1.el6eap
  • eap7-jackson-core-0:2.9.8-2.redhat_00004.1.el6eap
  • eap7-jackson-databind-0:2.9.8-2.redhat_00004.1.el6eap
  • eap7-jackson-datatype-jdk8-0:2.9.8-1.redhat_00004.1.el6eap
  • eap7-jackson-datatype-jsr310-0:2.9.8-1.redhat_00004.1.el6eap
  • eap7-jackson-jaxrs-base-0:2.9.8-2.redhat_00004.1.el6eap
  • eap7-jackson-jaxrs-json-provider-0:2.9.8-2.redhat_00004.1.el6eap
  • eap7-jackson-module-jaxb-annotations-0:2.9.8-1.redhat_00004.1.el6eap
  • eap7-jackson-modules-base-0:2.9.8-1.redhat_00004.1.el6eap
  • eap7-jackson-modules-java8-0:2.9.8-1.redhat_00004.1.el6eap
  • eap7-jberet-0:1.3.2-1.Final_redhat_00001.1.el6eap
  • eap7-jberet-core-0:1.3.2-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-ejb-client-0:4.0.15-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-el-api_3.0_spec-0:1.0.13-2.Final_redhat_00001.1.el6eap
  • eap7-jboss-genericjms-0:2.0.1-2.Final_redhat_00002.1.el6eap
  • eap7-jboss-logmanager-0:2.1.7-3.Final_redhat_00001.1.el6eap
  • eap7-jboss-remoting-jmx-0:3.0.1-1.Final_redhat_00001.1.el6eap
  • eap7-jboss-security-negotiation-0:3.0.5-2.Final_redhat_00001.1.el6eap
  • eap7-jboss-server-migration-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-cli-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-core-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap6.4-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.0-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.1-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.0-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.1-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly11.0-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly12.0-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly13.0-server-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly8.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly9.0-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el6eap
  • eap7-narayana-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-compensations-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jbosstxbridge-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jbossxts-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jts-idlj-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-jts-integration-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-api-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-bridge-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-integration-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-restat-util-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-narayana-txframework-0:5.9.1-1.Final_redhat_00001.1.el6eap
  • eap7-picketlink-api-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-bindings-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-common-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-config-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-federation-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-idm-api-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-idm-impl-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-idm-simple-schema-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-impl-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-picketlink-wildfly8-0:2.5.5-16.SP12_redhat_4.1.el6eap
  • eap7-resteasy-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-atom-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-cdi-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-client-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-client-microprofile-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-crypto-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jackson-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jackson2-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jaxb-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jaxrs-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jettison-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jose-jwt-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-jsapi-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-json-binding-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-json-p-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-multipart-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-rxjava2-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-spring-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-validator-provider-11-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-resteasy-yaml-provider-0:3.6.1-4.SP3_redhat_00001.1.el6eap
  • eap7-sun-istack-commons-0:3.0.7-2.redhat_00001.1.el6eap
  • eap7-undertow-0:2.0.19-1.Final_redhat_00001.1.el6eap
  • eap7-undertow-jastow-0:2.0.7-2.Final_redhat_00001.1.el6eap
  • eap7-undertow-server-0:1.2.4-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-0:7.2.1-6.GA_redhat_00004.1.el6eap
  • eap7-wildfly-elytron-0:1.6.2-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-elytron-tool-0:1.4.1-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-http-client-common-0:1.0.13-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-http-ejb-client-0:1.0.13-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-http-naming-client-0:1.0.13-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-http-transaction-client-0:1.0.13-1.Final_redhat_00001.1.el6eap
  • eap7-wildfly-javadocs-0:7.2.1-6.GA_redhat_00004.1.el6eap
  • eap7-wildfly-modules-0:7.2.1-6.GA_redhat_00004.1.el6eap
  • eap7-wildfly-transaction-client-0:1.1.3-1.Final_redhat_00001.1.el6eap
  • eap7-yasson-0:1.0.2-1.redhat_00001.1.el6eap
  • eap7-activemq-artemis-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-cli-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-commons-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-core-client-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-dto-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-hornetq-protocol-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-hqclient-protocol-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-jdbc-store-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-jms-client-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-jms-server-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-journal-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-native-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-ra-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-selector-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-server-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-service-extensions-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-activemq-artemis-tools-0:2.6.3-5.redhat_00020.1.el7eap
  • eap7-apache-commons-lang-0:3.8.0-1.redhat_00001.1.el7eap
  • eap7-apache-cxf-0:3.2.7-1.redhat_00001.1.el7eap
  • eap7-apache-cxf-rt-0:3.2.7-1.redhat_00001.1.el7eap
  • eap7-apache-cxf-services-0:3.2.7-1.redhat_00001.1.el7eap
  • eap7-apache-cxf-tools-0:3.2.7-1.redhat_00001.1.el7eap
  • eap7-apache-cxf-xjc-utils-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-artemis-native-0:2.6.3-15.redhat_00020.el7eap
  • eap7-artemis-native-wildfly-0:2.6.3-15.redhat_00020.el7eap
  • eap7-byte-buddy-0:1.9.5-1.redhat_00001.1.el7eap
  • eap7-cxf-xjc-boolean-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-cxf-xjc-bug986-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-cxf-xjc-dv-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-cxf-xjc-runtime-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-cxf-xjc-ts-0:3.2.3-2.redhat_00002.1.el7eap
  • eap7-dom4j-0:2.1.1-2.redhat_00001.1.el7eap
  • eap7-hibernate-0:5.3.9-2.Final_redhat_00002.1.el7eap
  • eap7-hibernate-core-0:5.3.9-2.Final_redhat_00002.1.el7eap
  • eap7-hibernate-entitymanager-0:5.3.9-2.Final_redhat_00002.1.el7eap
  • eap7-hibernate-envers-0:5.3.9-2.Final_redhat_00002.1.el7eap
  • eap7-hibernate-java8-0:5.3.9-2.Final_redhat_00002.1.el7eap
  • eap7-httpcomponents-asyncclient-0:4.1.4-1.redhat_00001.1.el7eap
  • eap7-infinispan-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-cachestore-jdbc-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-cachestore-remote-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-client-hotrod-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-commons-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-core-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-commons-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-spi-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-infinispan-hibernate-cache-v53-0:9.3.6-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-api-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-impl-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-common-spi-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-core-api-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-core-impl-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-deployers-common-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-jdbc-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-ironjacamar-validator-0:1.4.15-1.Final_redhat_00001.1.el7eap
  • eap7-istack-commons-runtime-0:3.0.7-2.redhat_00001.1.el7eap
  • eap7-istack-commons-tools-0:3.0.7-2.redhat_00001.1.el7eap
  • eap7-jackson-annotations-0:2.9.8-2.redhat_00004.1.el7eap
  • eap7-jackson-core-0:2.9.8-2.redhat_00004.1.el7eap
  • eap7-jackson-databind-0:2.9.8-2.redhat_00004.1.el7eap
  • eap7-jackson-datatype-jdk8-0:2.9.8-1.redhat_00004.1.el7eap
  • eap7-jackson-datatype-jsr310-0:2.9.8-1.redhat_00004.1.el7eap
  • eap7-jackson-jaxrs-base-0:2.9.8-2.redhat_00004.1.el7eap
  • eap7-jackson-jaxrs-json-provider-0:2.9.8-2.redhat_00004.1.el7eap
  • eap7-jackson-module-jaxb-annotations-0:2.9.8-1.redhat_00004.1.el7eap
  • eap7-jackson-modules-base-0:2.9.8-1.redhat_00004.1.el7eap
  • eap7-jackson-modules-java8-0:2.9.8-1.redhat_00004.1.el7eap
  • eap7-jberet-0:1.3.2-1.Final_redhat_00001.1.el7eap
  • eap7-jberet-core-0:1.3.2-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-ejb-client-0:4.0.15-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-el-api_3.0_spec-0:1.0.13-2.Final_redhat_00001.1.el7eap
  • eap7-jboss-genericjms-0:2.0.1-2.Final_redhat_00002.1.el7eap
  • eap7-jboss-logmanager-0:2.1.7-3.Final_redhat_00001.1.el7eap
  • eap7-jboss-remoting-jmx-0:3.0.1-1.Final_redhat_00001.1.el7eap
  • eap7-jboss-security-negotiation-0:3.0.5-2.Final_redhat_00001.1.el7eap
  • eap7-jboss-server-migration-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-cli-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-core-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap6.4-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap6.4-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.0-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.1-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.1-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.0-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.1-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly10.1-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly11.0-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly11.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly12.0-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly12.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly13.0-server-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly8.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly8.2-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly9.0-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-jboss-server-migration-wildfly9.0-to-eap7.2-0:1.3.0-7.Final_redhat_00004.1.el7eap
  • eap7-narayana-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-compensations-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jbosstxbridge-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jbossxts-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jts-idlj-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-jts-integration-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-api-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-bridge-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-integration-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-restat-util-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-narayana-txframework-0:5.9.1-1.Final_redhat_00001.1.el7eap
  • eap7-picketlink-api-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-bindings-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-common-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-config-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-federation-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-idm-api-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-idm-impl-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-idm-simple-schema-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-impl-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-picketlink-wildfly8-0:2.5.5-16.SP12_redhat_4.1.el7eap
  • eap7-resteasy-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-atom-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-cdi-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-client-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-client-microprofile-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-crypto-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jackson-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jackson2-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jaxb-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jaxrs-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jettison-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jose-jwt-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-jsapi-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-json-binding-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-json-p-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-multipart-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-rxjava2-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-spring-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-validator-provider-11-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-resteasy-yaml-provider-0:3.6.1-4.SP3_redhat_00001.1.el7eap
  • eap7-sun-istack-commons-0:3.0.7-2.redhat_00001.1.el7eap
  • eap7-undertow-0:2.0.19-1.Final_redhat_00001.1.el7eap
  • eap7-undertow-jastow-0:2.0.7-2.Final_redhat_00001.1.el7eap
  • eap7-undertow-server-0:1.2.4-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-0:7.2.1-6.GA_redhat_00004.1.el7eap
  • eap7-wildfly-elytron-0:1.6.2-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-elytron-tool-0:1.4.1-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-http-client-common-0:1.0.13-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-http-ejb-client-0:1.0.13-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-http-naming-client-0:1.0.13-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-http-transaction-client-0:1.0.13-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly-java-jdk11-0:7.2.1-6.GA_redhat_00004.1.el7eap
  • eap7-wildfly-java-jdk8-0:7.2.1-6.GA_redhat_00004.1.el7eap
  • eap7-wildfly-javadocs-0:7.2.1-6.GA_redhat_00004.1.el7eap
  • eap7-wildfly-modules-0:7.2.1-6.GA_redhat_00004.1.el7eap
  • eap7-wildfly-transaction-client-0:1.1.3-1.Final_redhat_00001.1.el7eap
  • eap7-yasson-0:1.0.2-1.redhat_00001.1.el7eap
refmap via4
bid 107585
bugtraq 20190527 [SECURITY] [DSA 4452-1] jackson-databind security update
confirm
debian DSA-4452
misc
mlist
  • [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities
  • [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
  • [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
  • [lucene-issues] 20191004 [GitHub] [lucene-solr] marungo opened a new pull request #925: SOLR-13818: Upgrade jackson to 2.10.0
Last major update 20-10-2020 - 22:15
Published 21-03-2019 - 16:00
Last modified 20-10-2020 - 22:15
Back to Top