A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
5101FEB1-D47B-4AFF-89A1-22F77AE13819
2.8.11.5
2.0.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
FE5543DD-3F9D-45EF-8034-E1EF9657955A
2.9.10
2.9.0
OR
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:linux:*:*
9FBC1BD0-FF12-4691-8751-5F245D991989
7.3
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*
BD075607-09B7-493E-8611-66D041FFDA62
7.3
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB
9.5
cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*
5EC98B22-FFAA-4B59-8E63-EBAA4336AD13
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
5735E553-9731-4AAC-BCFF-989377F817B3
cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*
7081652A-D28B-494E-94EF-CA88117F23EE
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
E94F7F59-1785-493F-91A7-5F5EA5E87E4D
OR
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43
OR
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*
0C3AA5CE-9ACB-4E96-A4C1-50A662D641FB
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
B4911A72-5FAE-47C5-A141-2E3CA8E1CCAB
OR
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
142AD0DD-4CF3-4D74-9442-459CE3347E3A
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
F4CFF558-3C47-480D-A2F0-BABF26042943
OR
AND
cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:*:*:*:*:*:*:*:*
D88DDE7D-4DCC-4821-A112-2FAF1502717F
18.0
cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:*
E7BE0590-31BD-4FCD-B50E-A5F86196F99E
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:17.0:*:*:*:*:*:*:*
A7FBF5C7-EC73-4CE4-8CB7-E9CF5705DB25
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
F14A818F-AA16-4438-A3E4-E64C9287AC66
OR
Another gadget (*) type report regarding a class of `ehcache` package (follow up for #2387)

Mitre id: CVE-2019-17267
Reporter: lufeirider

Fix included in:

* 2.9.10
* 2.8.11.5
* does not affect 2.10.0 and later

-----

(*) See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for more on general problem type

Block one more gadget type (ehcache, CVE-2019-17267)
This is a GitHub Issue
repo:jackson-databind
owner:FasterXML
Title : Block one more gadget type (ehcache, CVE-2019-17267)
Issue date:

--- start body ---
Another gadget (*) type report regarding a class of `ehcache` package (follow up for #2387)

Mitre id: CVE-2019-17267
Reporter: lufeirider

Fix included in:

* 2.9.10
* 2.8.11.5
* does not affect 2.10.0 and later

-----

(*) See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for more on general problem type

--- end body ---

comments :
--- start comments ---

--- end comments ---