cvelist/2018/7xxx/CVE-2018-7489.json

172 lines
6.5 KiB
JSON
Raw Normal View History

2018-02-26 10:04:31 -05:00
{
2019-04-23 20:01:03 +00:00
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-7489",
"STATE": "PUBLIC"
2019-03-18 00:31:22 +00:00
},
2019-04-23 20:01:03 +00:00
"affects": {
"vendor": {
"vendor_data": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"product": {
"product_data": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"product_name": "n/a",
"version": {
"version_data": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"version_value": "n/a"
2019-03-18 00:31:22 +00:00
}
]
}
}
]
},
2019-04-23 20:01:03 +00:00
"vendor_name": "n/a"
2019-03-18 00:31:22 +00:00
}
2019-01-16 14:04:51 -05:00
]
2019-03-18 00:31:22 +00:00
}
},
2019-04-23 20:01:03 +00:00
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath."
2019-03-18 00:31:22 +00:00
}
]
},
2019-04-23 20:01:03 +00:00
"problemtype": {
"problemtype_data": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"description": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"lang": "eng",
"value": "n/a"
2019-03-18 00:31:22 +00:00
}
]
}
]
},
2019-04-23 20:01:03 +00:00
"references": {
"reference_data": [
2019-03-18 00:31:22 +00:00
{
2019-04-23 20:01:03 +00:00
"name": "103203",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/103203"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1448",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1448"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"refsource": "CONFIRM",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1449",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1449"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:2938",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2938"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1450",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1450"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "https://security.netapp.com/advisory/ntap-20180328-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180328-0001/"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:2090",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2090"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:2939",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2939"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "1041890",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1041890"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "1040693",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1040693"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "https://github.com/FasterXML/jackson-databind/issues/1931",
"refsource": "CONFIRM",
"url": "https://github.com/FasterXML/jackson-databind/issues/1931"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1786",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1786"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1451",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1451"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "DSA-4190",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2018/dsa-4190"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:1447",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:1447"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:2088",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2088"
2019-03-18 00:31:22 +00:00
},
{
2019-04-23 20:01:03 +00:00
"name": "RHSA-2018:2089",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2089"
Bill Situ <Bill.Situ@oracle.com> This update includes 3rd party CVEs released in Oracle Critical Patch Update 2019 April. On branch cna/Oracle/CPU2019Apr_3rd Changes to be committed: modified: 2014/0xxx/CVE-2014-0107.json modified: 2014/0xxx/CVE-2014-0114.json modified: 2014/7xxx/CVE-2014-7923.json modified: 2014/7xxx/CVE-2014-7926.json modified: 2014/7xxx/CVE-2014-7940.json modified: 2014/8xxx/CVE-2014-8146.json modified: 2014/8xxx/CVE-2014-8147.json modified: 2014/9xxx/CVE-2014-9654.json modified: 2014/9xxx/CVE-2014-9911.json modified: 2015/1xxx/CVE-2015-1832.json modified: 2015/3xxx/CVE-2015-3253.json modified: 2015/5xxx/CVE-2015-5922.json modified: 2015/9xxx/CVE-2015-9251.json modified: 2016/1000xxx/CVE-2016-1000031.json modified: 2016/1xxx/CVE-2016-1181.json modified: 2016/1xxx/CVE-2016-1182.json modified: 2016/2xxx/CVE-2016-2141.json modified: 2016/3xxx/CVE-2016-3092.json modified: 2016/4xxx/CVE-2016-4000.json modified: 2016/6xxx/CVE-2016-6293.json modified: 2016/7xxx/CVE-2016-7055.json modified: 2016/7xxx/CVE-2016-7103.json modified: 2016/7xxx/CVE-2016-7415.json modified: 2016/8xxx/CVE-2016-8735.json modified: 2017/0xxx/CVE-2017-0861.json modified: 2017/12xxx/CVE-2017-12617.json modified: 2017/14xxx/CVE-2017-14952.json modified: 2017/15xxx/CVE-2017-15265.json modified: 2017/17xxx/CVE-2017-17484.json modified: 2017/3xxx/CVE-2017-3730.json modified: 2017/3xxx/CVE-2017-3731.json modified: 2017/3xxx/CVE-2017-3732.json modified: 2017/3xxx/CVE-2017-3733.json modified: 2017/3xxx/CVE-2017-3735.json modified: 2017/3xxx/CVE-2017-3736.json modified: 2017/3xxx/CVE-2017-3738.json modified: 2017/5xxx/CVE-2017-5533.json modified: 2017/5xxx/CVE-2017-5645.json modified: 2017/5xxx/CVE-2017-5664.json modified: 2017/5xxx/CVE-2017-5753.json modified: 2017/5xxx/CVE-2017-5754.json modified: 2017/7xxx/CVE-2017-7525.json modified: 2017/7xxx/CVE-2017-7867.json modified: 2017/7xxx/CVE-2017-7868.json modified: 2017/8xxx/CVE-2017-8105.json modified: 2017/8xxx/CVE-2017-8287.json modified: 2017/9xxx/CVE-2017-9798.json modified: 2018/0xxx/CVE-2018-0161.json modified: 2018/0xxx/CVE-2018-0495.json modified: 2018/0xxx/CVE-2018-0732.json modified: 2018/0xxx/CVE-2018-0733.json modified: 2018/0xxx/CVE-2018-0734.json modified: 2018/0xxx/CVE-2018-0735.json modified: 2018/0xxx/CVE-2018-0737.json modified: 2018/0xxx/CVE-2018-0739.json modified: 2018/1000xxx/CVE-2018-1000004.json modified: 2018/1000xxx/CVE-2018-1000180.json modified: 2018/1000xxx/CVE-2018-1000613.json modified: 2018/10xxx/CVE-2018-10901.json modified: 2018/11xxx/CVE-2018-11039.json modified: 2018/11xxx/CVE-2018-11040.json modified: 2018/11xxx/CVE-2018-11218.json modified: 2018/11xxx/CVE-2018-11219.json modified: 2018/11xxx/CVE-2018-11236.json modified: 2018/11xxx/CVE-2018-11237.json modified: 2018/11xxx/CVE-2018-11761.json modified: 2018/11xxx/CVE-2018-11763.json modified: 2018/11xxx/CVE-2018-11775.json modified: 2018/11xxx/CVE-2018-11784.json modified: 2018/12xxx/CVE-2018-12022.json modified: 2018/12xxx/CVE-2018-12023.json modified: 2018/12xxx/CVE-2018-12539.json modified: 2018/14xxx/CVE-2018-14718.json modified: 2018/14xxx/CVE-2018-14719.json modified: 2018/14xxx/CVE-2018-14720.json modified: 2018/14xxx/CVE-2018-14721.json modified: 2018/15xxx/CVE-2018-15756.json modified: 2018/16xxx/CVE-2018-16864.json modified: 2018/16xxx/CVE-2018-16865.json modified: 2018/16xxx/CVE-2018-16890.json modified: 2018/17xxx/CVE-2018-17189.json modified: 2018/17xxx/CVE-2018-17199.json modified: 2018/19xxx/CVE-2018-19360.json modified: 2018/19xxx/CVE-2018-19361.json modified: 2018/19xxx/CVE-2018-19362.json modified: 2018/1xxx/CVE-2018-1257.json modified: 2018/1xxx/CVE-2018-1258.json modified: 2018/1xxx/CVE-2018-1304.json modified: 2018/1xxx/CVE-2018-1305.json modified: 2018/1xxx/CVE-2018-1656.json modified: 2018/20xxx/CVE-2018-20685.json modified: 2018/3xxx/CVE-2018-3620.json modified: 2018/3xxx/CVE-2018-3646.json modified: 2018/3xxx/CVE-2018-3693.json modified: 2018/5xxx/CVE-2018-5407.json modified: 2018/6xxx/CVE-2018-6485.json modified: 2018/7xxx/CVE-2018-7489.json modified: 2018/7xxx/CVE-2018-7566.json modified: 2018/8xxx/CVE-2018-8013.json modified: 2018/8xxx/CVE-2018-8034.json modified: 2018/8xxx/CVE-2018-8088.json modified: 2019/0xxx/CVE-2019-0190.json modified: 2019/1xxx/CVE-2019-1559.json modified: 2019/3xxx/CVE-2019-3772.json modified: 2019/3xxx/CVE-2019-3822.json modified: 2019/3xxx/CVE-2019-3823.json
2019-04-23 04:53:58 -07:00
},
{
2019-04-23 20:01:03 +00:00
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"refsource": "MISC",
"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
2019-03-18 00:31:22 +00:00
}
]
}
}