CVE-2019-17531 in Business Intelligence Enterprise Edition

요약 (영어)

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

예약하다

2019. 10. 12.

상태

확인됨

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
234846	Oracle Business Intelligence Enterprise Edition Analytics Server 권한 상승	502	정의되지 않음	공식 수정	CVE-2019-17531
163180	Oracle GoldenGate Application Adapters Build 권한 상승	502	정의되지 않음	공식 수정	CVE-2019-17531
158271	Oracle WebCenter Portal Security 권한 상승	20	정의되지 않음	공식 수정	CVE-2019-17531
143428	FasterXML jackson-databind JSON 권한 상승	20	정의되지 않음	정의되지 않음	CVE-2019-17531

출처

• MITRE
• NVD
• CVE Details