CVE-2018-12022
When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 7.35% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-502
- Affected
- fasterxml/jackson-databind · debian/debian linux · fedoraproject/fedora · oracle/jd edwards enterpriseone tools · oracle/retail merchandising system · redhat/automation manager · redhat/decision manager · redhat/jboss brms · redhat/jboss enterprise application platform · redhat/openshift container platform · redhat/single sign-on
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/bid/107585Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0959Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:0782Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:0877Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1106Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1107Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1108Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1140Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1782Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1797Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1822Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1823Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2804Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2858Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3002Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3140Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3149Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3892Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4037Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1671098Issue Tracking, Third Party Advisory
- https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226aPatch, Third Party Advisory
- https://github.com/FasterXML/jackson-databind/issues/2052Patch, Third Party Advisory
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d%40%3Cissues.lucene.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC/
- https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://seclists.org/bugtraq/2019/May/68Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190530-0003/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.