CVE-2020-8840
10.02.2020, 21:56
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fasterxml | jackson-databind | 2.0.0 ≤ 𝑥 < 2.7.9.7 |
| fasterxml | jackson-databind | 2.8.0 ≤ 𝑥 < 2.8.11.5 |
| fasterxml | jackson-databind | 2.9.0 ≤ 𝑥 < 2.9.10.3 |
| debian | debian_linux | 8.0 |
| netapp | oncommand_api_services | - |
| netapp | oncommand_workflow_automation | - |
| netapp | service_level_manager | - |
| netapp | steelstore_cloud_integrated_storage | - |
| oracle | global_lifecycle_management_opatch | 𝑥 < 11.2.0.3.23 |
| oracle | global_lifecycle_management_opatch | 12.2.0.1.0 ≤ 𝑥 < 12.2.0.1.19 |
| oracle | global_lifecycle_management_opatch | 13.9.4.0.0 ≤ 𝑥 < 13.9.4.2.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References