A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
7036DA13-110D-40B3-8494-E361BBF4AFCD
2.6.7.3
2.0.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
5F83B193-74CF-459A-8055-AE0F033D5BCB
2.8.11.5
2.7.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
FE5543DD-3F9D-45EF-8034-E1EF9657955A
2.9.10
2.9.0
OR
cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*
5EC98B22-FFAA-4B59-8E63-EBAA4336AD13
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
5735E553-9731-4AAC-BCFF-989377F817B3
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
E94F7F59-1785-493F-91A7-5F5EA5E87E4D
OR
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
97A4B8DF-58DA-4AB6-A1F9-331B36409BA3
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
80F0FA5D-8D3B-4C0E-81E2-87998286AF33
OR
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
DEECE5FC-CACF-4496-A3E7-164736409252
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
07B237A9-69A3-4A9C-9DA0-4E06BD37AE73
OR
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*
0C3AA5CE-9ACB-4E96-A4C1-50A662D641FB
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
B4911A72-5FAE-47C5-A141-2E3CA8E1CCAB
OR
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
142AD0DD-4CF3-4D74-9442-459CE3347E3A
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
F4CFF558-3C47-480D-A2F0-BABF26042943
OR
AND
cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*
C2BEE49E-A5AA-42D3-B422-460454505480
cpe:2.3:a:oracle:banking_platform:2.4.1:*:*:*:*:*:*:*
F4FF66F7-10C8-4A1C-910A-EF7D12A4284C
cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*
35AD0C07-9688-4397-8D45-FBB88C0F0C11
cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*
8972497F-6E24-45A9-9A18-EB0E842CB1D4
cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*
400509A8-D6F2-432C-A2F1-AD5B8778D0D9
cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*
282150FF-C945-4A3E-8A80-E8757A8907EA
cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*
645AA3D1-C8B5-4CD2-8ACE-31541FA267F0
cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*
727DF4F5-3D21-491E-96B9-EC973A6C9C18
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
51433748-DED0-416D-8BFE-F3493E13772E
8.0.8
8.0.2
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
F6455EB1-C741-45E8-A53E-E7AD7A5D00EE
11.2.0.3.23
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
BFD43191-E67F-4D1B-967B-3C7B20331945
12.2.0.1.19
12.2.0.1.0
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
062C588A-CBBA-470F-8D11-2F961922E927
13.9.4.2.1
13.9.4.0.0
cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:*
E7BE0590-31BD-4FCD-B50E-A5F86196F99E
cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*
F4E7F2AA-B851-4D85-9895-2CDD6BE9FCB4
19.1.0.0.1
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
E1A68EF8-15AA-42A7-9734-6F9470EB35CD
5.7.30
5.7.0
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
0E1A3769-E443-4511-B349-B5304F5E6EBD
8.0.20
8.0.0
cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*
6CBFA960-D242-43ED-8D4C-A60F01B70740
cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:*
D9E628E7-6CC5-418C-939F-8EEA69B222A0
cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*
0513B305-97EF-4609-A82E-D0CDFF9925BA
cpe:2.3:a:oracle:primavera_gateway:16.2.11:*:*:*:*:*:*:*
1DFB9704-6B99-4113-8537-E4AE0F791B86
cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:*
61A7F6E0-A4A4-4FC3-90CB-156933CB3B9A
cpe:2.3:a:oracle:primavera_gateway:17.12.6:*:*:*:*:*:*:*
2F5647E5-B051-41A6-B186-3584C725908B
cpe:2.3:a:oracle:primavera_gateway:18.8.0:*:*:*:*:*:*:*
99365245-49E8-4616-BD24-CE564AC1D17E
cpe:2.3:a:oracle:primavera_gateway:18.8.8.1:*:*:*:*:*:*:*
4A405B01-7DC5-41A0-9B61-C2DBE1C71A67
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
08FA59A8-6A62-4B33-8952-D6E658F8DAC9
17.12
17.7
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
D55A54FD-7DD1-49CD-BE81-0BE73990943C
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
82EB08C0-2D46-4635-88DF-E54F6452D3A3
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
202AD518-2E9B-4062-B063-9858AE1F9CE2
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
10864586-270E-4ACF-BDCC-ECFCD299305F
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0:*:*:*:*:*:*:*
A7FBF5C7-EC73-4CE4-8CB7-E9CF5705DB25
cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*
A0ED83E3-E6BF-4EAA-AF8F-33485A88A218
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*
11DA6839-849D-4CEF-85F3-38FE75E07183
cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*
BCE78490-A4BE-40BD-8C72-0A4526BBD4A4
cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*
55AE3629-4A66-49E4-A33D-6D81CC94962F
cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*
4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
F14A818F-AA16-4438-A3E4-E64C9287AC66
OR
Another gadget (*) type report regarding `HikariConfig`, via `HikariDataSource`

Mitre id: CVE-2019-14540
Reporter: iSafeBlue / blue at ixsec.org

(*) See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for more on general problem type

Fixed in:

* 2.9.10
* 2.8.11.5
* 2.6.7.3
* does not affect 2.10.0 and later

 Block one more gadget type (HikariCP, CVE-2019-14540)
This is a GitHub Issue
repo:jackson-databind
owner:FasterXML
Title :  Block one more gadget type (HikariCP, CVE-2019-14540)
Issue date:

--- start body ---
Another gadget (*) type report regarding `HikariConfig`, via `HikariDataSource`

Mitre id: CVE-2019-14540
Reporter: iSafeBlue / blue at ixsec.org

(*) See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for more on general problem type

Fixed in:

* 2.9.10
* 2.8.11.5
* 2.6.7.3
* does not affect 2.10.0 and later

--- end body ---

comments :
--- start comments ---

--- end comments ---