Vulnerabilidades do Red Hat Jboss Middleware Text-only Advisories

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Red Hat Jboss Middleware Text-only Advisories: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:redhat:jboss_middleware_text-only_advisories

CVE-2019-14439 Alta · 7.5 CWE-502 30/07/2019

Deserialization of Untrusted Data em Fasterxml Jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.

CVE-2016-4437 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-321 07/06/2016

Apache Shiro Code Execution Vulnerability

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.