| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| com.fasterxml.jackson.core:jackson-databind | ≥ 2.7.0, < 2.7.9.6≥ 2.8.0, < 2.8.11.4≥ 2.9.0, < 2.9.9.2< 2.6.7.3 | 2.7.9.62.8.11.42.9.9.22.6.7.3 |
| drill | = 1.16.0 | |
| jackson-databind | ≥ 2.0.0, < 2.6.7.3≥ 2.7.0, < 2.7.9.6≥ 2.8.0, < 2.8.11.4≥ 2.9.0, < 2.9.9.2 | 2.6.7.32.7.9.62.8.11.42.9.9.2 |
| banking platform | = 2.4.0= 2.4.1= 2.5.0= 2.6.0= 2.6.1= 2.7.0= 2.7.1 | |
| communications diameter signaling router | = 8.0.0= 8.1= 8.2= 8.2.1 | |
| communications instant messaging server | = 10.0.1.3.0 | |
| financial services analytical applications infrastructure | ≥ 8.0.2, ≤ 8.0.8 | |
| global lifecycle management opatch | = 11.2.0.3.23= 13.9.4.2.1≥ 12.2.0.1.0, < 12.2.0.1.19≥ 13.9.4.0.0, < 13.9.4.2.1< 11.2.0.3.23 | 12.2.0.1.1913.9.4.2.111.2.0.3.23 |
| goldengate stream analytics | < 19.1.0.0.1 | 19.1.0.0.1 |
| jd edwards enterpriseone orchestrator | = 9.2 | |
| jd edwards enterpriseone tools | = 9.2 | |
| primavera gateway | = 15.2= 16.1= 16.2= 18.8.0≥ 17.7, ≤ 17.12 | |
| retail customer management and segmentation foundation | = 17.0 | |
| retail xstore point of service | = 15.0= 16.0= 17.0= 18.0= 7.1 | |
| siebel engineering - installer & deployment | ≤ 19.8 | |
| siebel ui framework | ≤ 19.10 | |
| jboss middleware text-only advisories | = 1.0 |
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2, 2.8.11.4, 2.7.9.6, and 2.6.7.3. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン