QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-12022

Back to search

CVE-2018-12022

Published: Mar 17, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2019:0782
vendor-advisory
x_refsource_REDHAT
RHSA-2019:0877
vendor-advisory
x_refsource_REDHAT
RHBA-2019:0959
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1107
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1108
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1106
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1140
vendor-advisory
x_refsource_REDHAT
DSA-4452
vendor-advisory
x_refsource_DEBIAN
RHSA-2019:1782
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1797
vendor-advisory
x_refsource_REDHAT
107585
vdb-entry
x_refsource_BID
RHSA-2019:1822
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1823
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2804
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2858
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3002
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3140
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3149
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3892
vendor-advisory
x_refsource_REDHAT
RHSA-2019:4037
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now