Lucene search
IBM7B05B840ACCC17A8D2E2D9B0FD2D6480FB03A9408D40E605B8310E82A4503F00HistoryOct 14, 2020 - 8:48 p.m.
Security Bulletin: IBM Security Guardium is affected by a jackson-databind vulnerability
2020-10-1420:48:36
www.ibm.com
23
ibm security guardium
cve-2020-8840
vulnerability
EPSS
0.03
Percentile
91.0%
Summary
IBM Security Guardium has fixed this vulnerability
Vulnerability Details
CVEID:CVE-2020-8840
**DESCRIPTION:**An unspecified error with the lack of certain xbean-reflect/JNDI blocking in FasterXML jackson-databind has an unknown impact and attack vector.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/176241 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Security Guardium | 11.1 |
Remediation/Fixes
| Product | Versions | Fix |
|---|---|---|
| IBM Security Guardium | 11.1 | http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Secur… |
Workarounds and Mitigations
None
Related
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
2020-06-05 02:05:15
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
2020-11-11 07:53:21
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
2020-02-23 03:51:40
ibm
ibm
osv
osv
CVE-2020-8840
2020-02-10 21:56:10
Deserialization of Untrusted Data in jackson-databind
2020-03-04 20:52:14
jackson-databind - security update
2020-02-20 00:00:00
veracode
veracode
Remote Code Execution
2020-02-11 02:42:43
cvelist
cvelist
CVE-2020-8840
2020-02-10 19:41:58
f5
f5
K15320518 : FasterXML jackson-databind vulnerability CVE-2020-8840
2020-03-24 00:00:00
cve
cve
CVE-2020-8840
2020-02-10 21:56:10
github
github
Deserialization of Untrusted Data in jackson-databind
2020-03-04 20:52:14
huawei
huawei
ubuntucve
ubuntucve
CVE-2020-8840
2020-02-10 00:00:00
debiancve
debiancve
CVE-2020-8840
2020-02-10 21:56:10
nessus
nessus
F5 Networks BIG-IP : FasterXML jackson-databind vulnerability (K15320518)
2020-07-22 00:00:00
Debian DLA-2111-1 : jackson-databind security update
2020-02-24 00:00:00
RHEL 8 : pki-core:10.6 and pki-deps:10.6 (RHSA-2020:1644)
2020-04-28 00:00:00
redhatcve
redhatcve
CVE-2020-8840
2021-07-18 00:41:10
nvd
nvd
CVE-2020-8840
2020-02-10 21:56:10
prion
prion
Design/Logic Flaw
2020-02-10 21:56:00
debian
debian
[SECURITY] [DLA 2111-1] jackson-databind security update
2020-02-20 15:46:53
openvas
openvas
Debian: Security Advisory (DLA-2111-1)
2020-02-21 00:00:00
Mageia: Security Advisory (MGASA-2021-0153)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4813-1)
2023-01-27 00:00:00
attackerkb
attackerkb
CVE-2020-1938
2020-02-24 00:00:00
checkpoint_advisories
checkpoint_advisories
redhat
redhat
rocky
rocky
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-04-28 09:00:20
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2021-03-27 17:27:02
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
EPSS
0.03
Percentile
91.0%
Related for 7B05B840ACCC17A8D2E2D9B0FD2D6480FB03A9408D40E605B8310E82A4503F00