VDB
BDU%3A2021-02953
BDU%3A2021-02953
PUBLISHED
CVSS 10 CRITICAL
Уязвимость библиотеки Jackson-databind проекта FasterXML, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., FasterXML, LLC, АО «НТЦ ИТ РОСА» | Jboss Fuse, OpenShift Application Runtimes, JBoss Enterprise Application Platform Continuous Delivery, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat Descision Manager, JBoss EAP, Red Hat Process Automation, Jackson-databind, JBoss Data Grid, РОСА ХРОМ (запись в едином реестре российских программ №1607) |
Timeline
- Jun 10, 2021 CVE Published
- Mar 5, 2025 CVE Updated
References
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cognos-analytics-has-addressed-multiple-vulnerabilities-3/ url
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E url
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E url
- https://access.redhat.com/security/cve/CVE-2019-14892 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2629 url
- https://github.com/FasterXML/jackson-databind/issues/2462 advisory