Red Hat Security Advisory

RHSA-2018:1786

Red Hat OpenShift Application Runtimes security and bug fix update

Released 2018-06-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Openshift Application Runtimes

Fixes 1 record

TI-2018-05398 CVE-2018-7489 · GHSA-cggj-fvv3-cqwv

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5…

HIGH 67

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.19781 Published 2018-02-26 Partial fix · 2.8.11.1, 2.9.5 +2 CWE-184