| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| com.fasterxml.jackson.core:jackson-databind | ≥ 2.7.0, < 2.8.11.5≥ 2.9.0, < 2.9.10< 2.6.7.3 | 2.8.11.52.9.102.6.7.3 |
| jackson-databind | ≥ 2.0.0, < 2.6.7.3≥ 2.7.0, < 2.8.11.5≥ 2.9.0, < 2.9.10 | 2.6.7.32.8.11.52.9.10 |
| banking platform | = 2.4.0= 2.4.1= 2.5.0= 2.6.0= 2.6.1= 2.7.0= 2.7.1 | |
| customer management and segmentation foundation | = 18.0 | |
| financial services analytical applications infrastructure | ≥ 8.0.2, ≤ 8.0.8 | |
| global lifecycle management opatch | ≥ 12.2.0.1.0, < 12.2.0.1.19≥ 13.9.4.0.0, < 13.9.4.2.1< 11.2.0.3.23 | 12.2.0.1.1913.9.4.2.111.2.0.3.23 |
| goldengate application adapters | = 19.1.0.0.0 | |
| goldengate stream analytics | < 19.1.0.0.1 | 19.1.0.0.1 |
| primavera gateway | = 15.2= 16.1= 16.2= 18.8.0≥ 17.7, ≤ 17.12 | |
| retail customer management and segmentation foundation | = 17.0 | |
| retail xstore point of service | = 15.0= 16.0= 17.0= 18.0= 7.1 | |
| weblogic server | = 12.2.1.3.0 | |
| jboss enterprise application platform | = 7.2= 7.3 |
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10, 2.8.11.5, and 2.6.7.3. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン