VDB
BDU%3A2021-00714
BDU%3A2021-00714
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость компонента org.aoju.bus.proxy.provider.remoting.RmiProvider библиотеки Jackson-databind проекта FasterXML, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., ООО «РусБИТех-Астра», Сообщество свободного программного обеспечения, Red Hat Inc., FasterXML, LLC, АО «НТЦ ИТ РОСА», АО «Концерн ВНИИНС» | Primavera Unifier, WebLogic Server, Oracle Retail Merchandising System, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Debian GNU/Linux, Retail Xstore Point of Service, OpenShift Application Runtimes, Enterprise Manager Base Platform, Financial Services Price Creation and Discovery, Oracle Agile PLM, Oracle Retail Service Backbone, CodeReady Studio, Financial Services Analytical Applications Infrastructure, Oracle Banking Platform, Communications Instant Messaging Server, Jackson-databind, Oracle Communications Contacts Server, Oracle Communications Evolved Communications Application Server, Communications Network Charging and Control, Oracle Retail Sales Audit, Oracle Global Lifecycle Management OPatch, Communications Diameter Signaling Router, Oracle Communications Element Manager, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager, Financial Services Institutional Performance Analytics, Financial Services Retail Customer Analytics, Insurance Policy Administration J2EE, JD Edwards EnterpriseOne Orchestrator, JD Edwards EnterpriseOne Tools, РОСА ХРОМ (запись в едином реестре российских программ №1607), ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Feb 16, 2021 CVE Published
- Mar 5, 2025 CVE Updated
References
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://github.com/FasterXML/jackson-databind/issues/2660 url
- https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html url
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 url
- https://access.redhat.com/security/cve/cve-2020-10673 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-10673 url
- https://security-tracker.debian.org/tracker/CVE-2020-10673 url
- https://github.com/nomi-sec/PoC-in-GitHub/tree/master/2020 url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2629 url