QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-3558

Back to search

CVE-2014-3558

Published: Sep 30, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2015:0720
vendor-advisory
x_refsource_REDHAT
RHSA-2014:1288
vendor-advisory
x_refsource_REDHAT
RHSA-2015:0125
vendor-advisory
x_refsource_REDHAT
RHSA-2014:1285
vendor-advisory
x_refsource_REDHAT
RHSA-2014:1286
vendor-advisory
x_refsource_REDHAT
RHSA-2014:1287
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now