OPENSUSE-SU-2019:2058-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2019-10086
Published: 02 Sept 2019, 18:18
Last modified:04 Feb 2026, 03:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

02 Sept 2019, 18:18
Published
Vulnerability first disclosed
04 Feb 2026, 03:32
Last Modified
Vulnerability information updated

Description

Security update for apache-commons-beanutils This update for apache-commons-beanutils fixes the following issues: Security issue fixed: - CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•apache-commons-beanutils&distro=openSUSE Leap 15.0

    < 1.9.2-lp151.3.3.1

  • opensuse•apache-commons-beanutils&distro=openSUSE Leap 15.1

    < 1.9.2-lp151.3.3.1

References (3)