CVE-2018-12023

Aliases:GHSA-6wqp-v4v6-c87c
Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 17 Mar 2019, 17:57
Last modified:05 Aug 2024, 08:24

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.5 HIGH
v3.0 (nvd)
EPSS Score
4.94% LOW
5% probability +0.13%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Mar 2019, 17:57
Published
Vulnerability first disclosed
05 Aug 2024, 08:24
Last Modified
Vulnerability information updated

Description

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.

CVSS Metrics

  • v3.0•HIGH•Score: 7.5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 5.1AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 4.94%• Percentile: 90%

Techniques & Countermeasures

  • CWE-502•Deserialization of Untrusted Data

    The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected Systems

  • debian•debian_linux

    9.0

  • fasterxml•jackson-databind

    ≥ 2.7.0, < 2.7.9.4 | ≥ 2.8.0, < 2.8.11.2 | ≥ 2.9.0, < 2.9.6

  • fedoraproject•fedora

    29

  • com.fasterxml.jackson.core•jackson-databind

    ≥ 2.7.0, < 2.7.9.4 | ≥ 2.8.0, < 2.8.11.2 | ≥ 2.9.0, < 2.9.6

  • oracle•jd_edwards_enterpriseone_tools

    9.2

  • oracle•retail_merchandising_system

    15.0

  • redhat•automation_manager

    7.3.1

  • redhat•decision_manager

    7.3.1

  • redhat•jboss_brms

    6.4.10

  • redhat•jboss_enterprise_application_platform

    7.2.0

  • redhat•openshift_container_platform

    3.11

  • redhat•single_sign-on

    7.3

References (47)