[Bug 1815495] New: CVE-2020-10672 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1815495
Bug ID: 1815495
Summary: CVE-2020-10672 jackson-databind: mishandles the
interaction between serialization gadgets and typing
which could result in remote command execution
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mkaplan(a)redhat.com
CC: aboyko(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
ataylor(a)redhat.com, avibelli(a)redhat.com,
bgeorges(a)redhat.com, chazlett(a)redhat.com,
decathorpe(a)gmail.com, dkreling(a)redhat.com,
drieden(a)redhat.com, etirelli(a)redhat.com,
ganandan(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jbalunas(a)redhat.com, jochrist(a)redhat.com,
jolee(a)redhat.com, jpallich(a)redhat.com,
jschatte(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, krathod(a)redhat.com,
kverlaen(a)redhat.com, lef(a)fedoraproject.org,
lthon(a)redhat.com, mnovotny(a)redhat.com,
mszynkie(a)redhat.com, paradhya(a)redhat.com,
pdrozd(a)redhat.com, pgallagh(a)redhat.com,
pjindal(a)redhat.com, puntogil(a)libero.it,
rhcs-maint(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rsynek(a)redhat.com,
sdaley(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org,
sthorger(a)redhat.com, swoodman(a)redhat.com,
vhalbert(a)redhat.com
Target Milestone: ---
Classification: Other
jackson-databind: mishandles the interaction between serialization gadgets and
typing, related to
org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory which could
result in remote command execution
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 7 months