https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Summer Long slong@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Group|security, qe_staff | CC| |ccoleman@redhat.com, | |dedgar@redhat.com, | |dmcphers@redhat.com, | |java-maint@redhat.com, | |java-sig-commits@lists.fedo | |raproject.org, | |jgoulding@redhat.com, | |lef@fedoraproject.org, | |mgoldman@redhat.com, | |msimacek@redhat.com, | |puntogil@libero.it Summary|EMBARGOED slf4j: |slf4j: Deserialisation |Deserialisation |vulnerability in EventData |vulnerability in EventData |constructor can allow for |constructor can allow for |arbitrary code execution |arbitrary code execution | Whiteboard|impact=important,reported=2 |impact=important,public=201 |0180226,source=researcher,c |80222,reported=20180226,sou |vss3=8.1/CVSS:3.0/AV:N/AC:H |rce=researcher,cvss3=8.1/CV |/PR:N/UI:N/S:U/C:H/I:H/A:H, |SS:3.0/AV:N/AC:H/PR:N/UI:N/ |cwe=CWE-502,fedora-all/slf4 |S:U/C:H/I:H/A:H,cwe=CWE-502 |j=affected,fedora-all/slf4j |,fedora-all/slf4j=affected, |-jboss-logmanager=affected, |fedora-all/slf4j-jboss-logm |openshift-1/slf4j=affected, |anager=affected,openshift-1 |rhscl-3/rh-java-common-slf4 |/slf4j=affected,rhscl-3/rh- |j=new,sam-1/slf4j=wontfix,j |java-common-slf4j=new,sam-1 |ws-3/slf4j=new,brms-5/slf4j |/slf4j=wontfix,jws-3/slf4j= |=new,brms-6/slf4j=new,amq-6 |new,brms-5/slf4j=new,brms-6 |/slf4j=new,soap-5/slf4j=new |/slf4j=new,amq-6/slf4j=new, |,eap-5/slf4j=new,eap-6/slf4 |soap-5/slf4j=new,eap-5/slf4 |j=new,eap-7/slf4j=new,jbds- |j=new,eap-6/slf4j=new,eap-7 |11/slf4j=new,jdg-6/slf4j=ne |/slf4j=new,jbds-11/slf4j=ne |w,jdg-7/slf4j=new,jdv-6/slf |w,jdg-6/slf4j=new,jdg-7/slf |4j=new,fsw-6/slf4j=new,fuse |4j=new,jdv-6/slf4j=new,fsw- |-6/slf4j=new,jon-3/slf4j=ne |6/slf4j=new,fuse-6/slf4j=ne |w,jpp-6/slf4j=new,rhsso-7/s |w,jon-3/slf4j=new,jpp-6/slf |lf4j=new,rhn_satellite_6/sp |4j=new,rhsso-7/slf4j=new,rh |acewalk-slf4j=affected,rhn_ |n_satellite_6/spacewalk-slf |satellite_6/slf4j=affected, |4j=affected,rhn_satellite_6 |rhel-6/slf4j=new,rhel-7/slf |/slf4j=affected,rhel-6/slf4 |4j=new,rhel-8/slf4j=new,rhe |j=new,rhel-7/slf4j=new,rhel |v-m-4/jboss=new,vertx-3/slf |-8/slf4j=new,rhev-m-4/jboss |4j=new,openstack-8/slf4j-ap |=new,vertx-3/slf4j=new,open |i=new,openstack-9/slf4j-api |stack-8/slf4j-api=new,opens |=new,openstack-10/slf4j-api |tack-9/slf4j-api=new,openst |=new,openstack-11/slf4j-api |ack-10/slf4j-api=new,openst |=new,openstack-12/slf4j-api |ack-11/slf4j-api=new,openst |=new,openstack-13/slf4j-api |ack-12/slf4j-api=new,openst |=new |ack-13/slf4j-api=new