[Bug 1528565] CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-15095)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1528565
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |pavelp(a)redhat.com
Whiteboard|impact=important,public=201 |impact=important,public=201
|71212,reported=20171206,sou |71212,reported=20171206,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,eap-6/reste |S:U/C:H/I:H/A:H,eap-6/reste
|asy=affected,fedora-all/jac |asy=affected,fedora-all/jac
|kson-databind=affected,jdg- |kson-databind=affected,jdg-
|7/jackson-databind=affected |7/jackson-databind=affected
|,jon-3/resteasy=notaffected |,jon-3/resteasy=notaffected
|,openshift-enterprise-2/jac |,openshift-enterprise-2/jac
|kson-databind=affected,dts- |kson-databind=affected,dts-
|4/devtoolset-4-jackson-data |4/devtoolset-4-jackson-data
|bind=wontfix,rhev-m-3/jaspe |bind=wontfix,rhev-m-3/jaspe
|rreports-server-pro=wontfix |rreports-server-pro=wontfix
|,rhev-m-4/eap7-jackson-data |,rhev-m-4/eap7-jackson-data
|bind=affected,amq-6/jackson |bind=affected,amq-6/jackson
|-databind=notaffected,bpms- |-databind=notaffected,bpms-
|6/jackson-databind=notaffec |6/jackson-databind=new,jdv-
|ted,jdv-6/jackson-databind= |6/jackson-databind=notaffec
|notaffected,fuse-6/jackson- |ted,fuse-6/jackson-databind
|databind=notaffected,rhmap- |=notaffected,rhmap-4/jackso
|4/jackson-databind=notaffec |n-databind=notaffected,rhn_
|ted,rhn_satellite_6/jackson |satellite_6/jackson-databin
|-databind=new,rhscl-3/rh-ec |d=new,rhscl-3/rh-eclipse46-
|lipse46-jackson-databind=af |jackson-databind=affected,r
|fected,rhscl-3/rh-maven35-j |hscl-3/rh-maven35-jackson-d
|ackson-databind=affected,sa |atabind=affected,sam-1/jack
|m-1/jackson-databind=wontfi |son-databind=wontfix,eap-7/
|x,eap-7/resteasy=affected,b |resteasy=affected,brms-6/ja
|rms-6/jackson-databind=nota |ckson-databind=new
|ffected |
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months