Red Hat Security AdvisoryRHSA-2019:3297
Red Hat Process Automation Manager 7.5.0 Security Update
Released 2019-10-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Process Automation 7
Fixes 3 records
Priority MEDIUM 62
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.45205 · Published 2019-06-24 · Partial fix · 2.9.9.1, 2.8.11.4 +2 CWE-502
Priority MEDIUM 60
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code ex…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08111 · Published 2019-07-29 · Partial fix · 2.9.9.2, 2.8.11.4 +1 CWE-1321
Priority LOW 39
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.10902 · Published 2019-06-19 · Partial fix · 2.9.9.1, 2.8.11.4 +2 CWE-502
