CVE-2018-12023

Published: Mar 21, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.

Affected (13)

Products: Fasterxml: Jackson Databind · Debian: Debian Linux · Fedoraproject: Fedora · +2 more

Show all products

Fasterxml: Jackson Databind · Debian: Debian Linux · Fedoraproject: Fedora · Oracle: Jd Edwards Enterpriseone Tools, Retail Merchandising System · Redhat: Automation Manager, Decision Manager, Jboss Brms, Jboss Enterprise Application Platform, Openshift Container Platform, Single Sign On

1 product

1 product

1 product

2 products

Jd Edwards Enterpriseone Tools

Retail Merchandising System

6 products

Jboss Enterprise Application Platform

Openshift Container Platform

Single Sign On

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fasterxml Jackson Databind	From 2.7.0 to 2.7.9.4
Fasterxml Jackson Databind	From 2.8.0 to 2.8.11.2
Fasterxml Jackson Databind	From 2.9.0 to 2.9.6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0
Fedoraproject Fedora	Version 29

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Jd Edwards Enterpriseone Tools	Version 9.2
Oracle Retail Merchandising System	Version 15.0

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Automation Manager	Version 7.3.1
Redhat Decision Manager	Version 7.3.1
Redhat Jboss Brms	Version 6.4.10
Redhat Jboss Enterprise Application Platform	Version 7.2.0
Redhat Openshift Container Platform	Version 3.11
Redhat Single Sign On	Version 7.3

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (74)

http://www.securityfocus.com/bid/105659

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHBA-2019:0959

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0782

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0877

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1106

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1107

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1108

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1140

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1782

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1797

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1822

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1823

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2804

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:2858

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3002

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3140

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3149

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3892

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:4037

Source: cve@mitre.org

https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/FasterXML/jackson-databind/issues/2058

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d%40%3Cissues.lucene.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC/

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/May/68

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190530-0003/

Source: cve@mitre.org

Third Party Advisory

https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf

Source: cve@mitre.org

Technical DescriptionThird Party Advisory

https://www.debian.org/security/2019/dsa-4452

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

https://www.oracle.com/security-alerts/cpujul2020.html

Source: cve@mitre.org

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: cve@mitre.org

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.securityfocus.com/bid/105659