FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2020-01-02 20:15
Updated : 2021-07-20 16:15
NVD link : CVE-2019-20330
Mitre link : CVE-2019-20330
JSON object : View
CWE
CWE-502
Deserialization of Untrusted Data
Products Affected
oracle
- siebel_ui_framework
- goldengate_stream_analytics
- communications_network_charging_and_control
- primavera_unifier
- retail_sales_audit
- communications_evolved_communications_application_server
- weblogic_server
- communications_contacts_server
- jd_edwards_enterpriseone_orchestrator
- communications_instant_messaging_server
- enterprise_manager_base_platform
- global_lifecycle_management_opatch
- customer_management_and_segmentation_foundation
- siebel_engineering_-_installer_\&_deployment
- banking_platform
- goldengate_application_adapters
- jd_edwards_enterpriseone_tools
- retail_xstore_point_of_service
- retail_merchandising_system
- webcenter_portal
- trace_file_analyzer
- communications_billing_and_revenue_management
netapp
- active_iq_unified_manager
- steelstore_cloud_integrated_storage
- service_level_manager
- snapcenter
- oncommand_api_services
fasterxml
- jackson-databind
debian
- debian_linux