FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
2F87CF67-6994-43F1-BEC3-DD7D122D0146
2.7.9.7
2.0.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
BF323F3D-B2A4-41E7-94F9-5539C9B7025E
2.8.11.5
2.8.0
cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*
2AE46C31-B9B7-48D7-8AC7-CF431317D50E
2.9.10.2
2.9.0
OR
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*
5343F8F8-E8B4-49E9-A304-9C8A608B8027
2.9.0
2.4.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:*
790A89FD-6B86-49AE-9B4F-AE7262915E13
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
E39D442D-1997-49AF-8B02-5640BE2A26CC
cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1:*:*:*:*:*:*:*
ADE6EF8F-1F05-429B-A916-76FDB20CEB81
cpe:2.3:a:oracle:communications_contacts_server:8.0.0.4.0:*:*:*:*:*:*:*
113E281E-977E-4195-B131-B7C7A2933B6E
cpe:2.3:a:oracle:communications_evolved_communications_application_server:7.1:*:*:*:*:*:*:*
987811D5-DA5E-493D-8709-F9231A84E5F9
cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*
0DB23B9A-571E-4B77-B432-23F3DC9B67D1
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
2AB443D1-D8E0-4253-9E1C-B62AEBBE582A
12.0.3
12.0.0
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
ECC00750-1DBF-401F-886E-E0E65A277409
cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*
727DF4F5-3D21-491E-96B9-EC973A6C9C18
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*
7582B307-3899-4BBB-B868-BC912A4D0109
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
F6455EB1-C741-45E8-A53E-E7AD7A5D00EE
11.2.0.3.23
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
BFD43191-E67F-4D1B-967B-3C7B20331945
12.2.0.1.19
12.2.0.1.0
cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
062C588A-CBBA-470F-8D11-2F961922E927
13.9.4.2.1
13.9.4.0.0
cpe:2.3:a:oracle:goldengate_application_adapters:19.1.0.0.0:*:*:*:*:*:*:*
E7BE0590-31BD-4FCD-B50E-A5F86196F99E
cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*
F4E7F2AA-B851-4D85-9895-2CDD6BE9FCB4
19.1.0.0.1
cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*
6E46AE88-E9F8-41CB-B15F-12F5127A1E8D
9.2.4.2
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*
A3D635AE-5E4A-47FB-9FCA-D82D52A61367
9.2.4.2
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
08FA59A8-6A62-4B33-8952-D6E658F8DAC9
17.12
17.7
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
D55A54FD-7DD1-49CD-BE81-0BE73990943C
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
82EB08C0-2D46-4635-88DF-E54F6452D3A3
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
202AD518-2E9B-4062-B063-9858AE1F9CE2
cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
10864586-270E-4ACF-BDCC-ECFCD299305F
cpe:2.3:a:oracle:retail_merchandising_system:15.0.3:*:*:*:*:*:*:*
E7C9BB48-50B2-4735-9E2F-E492C708C36D
cpe:2.3:a:oracle:retail_merchandising_system:16.0.2:*:*:*:*:*:*:*
4A848888-0A4A-4B6D-8176-9A2685B37AC2
cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*
F8383028-B719-41FD-9B6A-71F8EB4C5F8D
cpe:2.3:a:oracle:retail_sales_audit:14.1:*:*:*:*:*:*:*
7DA6E92C-AC3B-40CF-96AE-22CD8769886F
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:*
11DA6839-849D-4CEF-85F3-38FE75E07183
cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:*
BCE78490-A4BE-40BD-8C72-0A4526BBD4A4
cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:*
55AE3629-4A66-49E4-A33D-6D81CC94962F
cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0:*:*:*:*:*:*:*
4CB39A1A-AD29-45DD-9EB5-5E2053A01B9A
cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0:*:*:*:*:*:*:*
27C26705-6D1F-4D5E-B64D-B479108154FF
cpe:2.3:a:oracle:siebel_engineering_-_installer_\&_deployment:*:*:*:*:*:*:*:*
A83C7FAE-9848-427E-88F8-BFA24134A84B
2.20.5
cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*
F510ED6D-7BF8-4548-BF0F-3CF926EB135E
20.5
cpe:2.3:a:oracle:trace_file_analyzer:12.2.0.1:*:*:*:*:*:*:*
EDB52969-7705-47CF-BD55-5632C56A7FD1
cpe:2.3:a:oracle:trace_file_analyzer:18c:*:*:*:*:*:*:*
67107890-A521-47E7-BC10-00635C85BEC4
cpe:2.3:a:oracle:trace_file_analyzer:19c:*:*:*:*:*:*:*
9B3C1811-E651-4975-A1AE-BCE3377D51A0
cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*
D6A4F71A-4269-40FC-8F61-1D1301F2B728
cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*
5A502118-5B2B-47AE-82EC-1999BD841103
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
F14A818F-AA16-4438-A3E4-E64C9287AC66
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418
OR
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43
OR
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:linux:*:*
9FBC1BD0-FF12-4691-8751-5F245D991989
7.3
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*
BD075607-09B7-493E-8611-66D041FFDA62
7.3
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB
9.5
cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*
5EC98B22-FFAA-4B59-8E63-EBAA4336AD13
cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*
7081652A-D28B-494E-94EF-CA88117F23EE
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
BDFB1169-41A0-4A86-8E4F-FDA9730B1E94
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
E94F7F59-1785-493F-91A7-5F5EA5E87E4D
OR
Another 2 gadget (*) types reported related to JNDI access.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2019-20330
Original discoverer: UltramanGaia

Fixed in:

* 2.9.10.2 (`jackson-bom` version `2.9.10.20200223`)
* 2.8.11.5 (`jackson-bom` version `2.8.11.20200210`)
* 2.7.9.7
* does not affect 2.10.0 and later

Block two more gadget types (ehcache/JNDI - CVE-2019-20330)
This is a GitHub Issue
repo:jackson-databind
owner:FasterXML
Title : Block two more gadget types (ehcache/JNDI - CVE-2019-20330)
Issue date:

--- start body ---
Another 2 gadget (*) types reported related to JNDI access.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2019-20330
Original discoverer: UltramanGaia

Fixed in:

* 2.9.10.2 (`jackson-bom` version `2.9.10.20200223`)
* 2.8.11.5 (`jackson-bom` version `2.8.11.20200210`)
* 2.7.9.7
* does not affect 2.10.0 and later

--- end body ---

comments :
--- start comments ---

--- end comments ---