CVE-2014-3558

Published: Sep 30, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.

Affected (8)

Products: Redhat: Hibernate Validator

1 product

Hibernate Validator

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Hibernate Validator	From 4.3.0 to 4.3.2
Redhat Hibernate Validator	From 5.0.0 to 5.0.3
Redhat Hibernate Validator	From 5.1.0 to 5.1.2
Redhat Hibernate Validator	Version 4.1.0
Redhat Hibernate Validator	Version 4.2.0
Redhat Hibernate Validator	Version 4.2.0 beta1
Redhat Hibernate Validator	Version 4.2.0 beta2
Redhat Hibernate Validator	Version 4.2.0 cr1

Related CWEs

References (16)

http://rhn.redhat.com/errata/RHSA-2014-1285.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1286.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1287.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1288.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0125.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0720.html

Source: secalert@redhat.com

Third Party Advisory

https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml

Source: secalert@redhat.com

Third Party Advisory

https://hibernate.atlassian.net/browse/HV-912

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1285.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1286.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1287.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1288.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0125.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0720.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://hibernate.atlassian.net/browse/HV-912

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.