CVE Vulnerabilities

CVE-2022-42003

Deserialization of Untrusted Data

Published: Oct 02, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Weakness

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected Software

Name Vendor Start Version End Version
Jackson-databind Fasterxml * 2.12.7.1 (excluding)
Jackson-databind Fasterxml 2.13.0 (including) 2.13.4.1 (excluding)
Important: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update RedHat jackson-databind *
Logging subsystem for Red Hat OpenShift 5.4 RedHat openshift-logging/elasticsearch6-rhel8:v6.8.1-265 *
Logging subsystem for Red Hat OpenShift 5.4 RedHat openshift-logging/elasticsearch-operator-bundle:v5.4.8-11 *
Logging subsystem for Red Hat OpenShift 5.4 RedHat openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-300 *
Logging subsystem for Red Hat OpenShift 5.4 RedHat openshift-logging/elasticsearch-rhel8-operator:v5.4.8-3 *
Migration Toolkit for Runtimes 1 on RHEL 8 RedHat jackson-databind *
OCP-Tools-4.12-RHEL-8 RedHat jenkins-2-plugins-0:4.12.1675702407-1.el8 *
OpenShift Developer Tools and Services for OCP 4.11 RedHat jenkins-2-plugins-0:4.11.1686831822-1.el8 *
OpenShift Logging 5.3 RedHat openshift-logging/elasticsearch6-rhel8:v6.8.1-277 *
OpenShift Logging 5.3 RedHat openshift-logging/elasticsearch-operator-bundle:v5.3.14-16 *
OpenShift Logging 5.3 RedHat openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-315 *
OpenShift Logging 5.3 RedHat openshift-logging/elasticsearch-rhel8-operator:v5.3.14-5 *
Red Hat AMQ Broker 7 RedHat jackson-databind *
Red Hat AMQ Streams 2.3.0 RedHat jackson-databind *
Red Hat AMQ Streams 2.4.0 RedHat *
Red Hat build of Eclipse Vert.x 4.3.4 RedHat jackson-databind *
Red Hat build of Quarkus 2.13.5 RedHat jackson-databind *
Red Hat build of Quarkus 2.7.7 RedHat *
Red Hat Data Grid 8.4.1 RedHat jackson-databind *
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 RedHat eap7-jackson-databind-0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 *
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 RedHat eap7-resteasy-0:3.0.27-1.Final_redhat_00001.1.ep7.el7 *
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 RedHat eap7-jackson-databind-0:2.10.4-4.redhat_00004.1.el7eap *
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 RedHat eap7-jackson-modules-java8-0:2.10.4-2.redhat_00004.1.el7eap *
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 RedHat eap7-resteasy-0:3.11.6-1.Final_redhat_00001.1.el7eap *
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 RedHat eap7-jackson-databind-0:2.12.7-1.redhat_00003.1.el8eap *
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 RedHat eap7-jackson-databind-0:2.12.7-1.redhat_00003.1.el9eap *
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 RedHat eap7-jackson-databind-0:2.12.7-1.redhat_00003.1.el7eap *
Red Hat Satellite 6.11 for RHEL 7 RedHat candlepin-0:4.1.19-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat foreman-0:3.1.1.26-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat rubygem-foreman_maintain-1:1.0.19-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat satellite-0:6.11.5-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat satellite-clone-0:3.1.1-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-naya-0:1.1.1-1.1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-pulp-container-0:2.9.9-1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-pulpcore-0:3.16.15-1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actioncable-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionmailbox-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionmailer-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionpack-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actiontext-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionview-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activejob-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activemodel-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activerecord-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activestorage-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activesupport-0:6.0.6-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-foreman_rh_cloud-0:5.0.44-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-foreman_theme_satellite-0:9.0.0.12-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-katello-0:4.3.0.52-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-rails-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-railties-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-smart_proxy_container_gateway-0:1.0.7-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat candlepin-0:4.1.19-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat foreman-0:3.1.1.26-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat rubygem-foreman_maintain-1:1.0.19-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat satellite-0:6.11.5-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat satellite-clone-0:3.1.1-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-naya-0:1.1.1-1.1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-pulp-container-0:2.9.9-1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-pulpcore-python-pulpcore-0:3.16.15-1.el7pc *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actioncable-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionmailbox-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionmailer-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionpack-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actiontext-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-actionview-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activejob-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activemodel-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activerecord-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activestorage-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-activesupport-0:6.0.6-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-foreman_rh_cloud-0:5.0.44-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-foreman_theme_satellite-0:9.0.0.12-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-katello-0:4.3.0.52-1.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-rails-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-railties-0:6.0.6-2.el7sat *
Red Hat Satellite 6.11 for RHEL 7 RedHat tfm-rubygem-smart_proxy_container_gateway-0:1.0.7-1.el7sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat candlepin-0:4.1.19-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat foreman-0:3.1.1.26-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-naya-0:1.1.1-1.1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-pulp-container-0:2.9.9-1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-pulpcore-0:3.16.15-1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actioncable-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionmailbox-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionmailer-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionpack-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actiontext-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionview-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activejob-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activemodel-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activerecord-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activestorage-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activesupport-0:6.0.6-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_maintain-1:1.0.19-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_rh_cloud-0:5.0.44-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_theme_satellite-0:9.0.0.12-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-katello-0:4.3.0.52-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-rails-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-railties-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-smart_proxy_container_gateway-0:1.0.7-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat satellite-0:6.11.5-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat satellite-clone-0:3.1.1-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat candlepin-0:4.1.19-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat foreman-0:3.1.1.26-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-naya-0:1.1.1-1.1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-pulp-container-0:2.9.9-1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat python-pulpcore-0:3.16.15-1.el8pc *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actioncable-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionmailbox-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionmailer-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionpack-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actiontext-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-actionview-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activejob-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activemodel-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activerecord-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activestorage-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-activesupport-0:6.0.6-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_maintain-1:1.0.19-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_rh_cloud-0:5.0.44-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-foreman_theme_satellite-0:9.0.0.12-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-katello-0:4.3.0.52-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-rails-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-railties-0:6.0.6-2.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat rubygem-smart_proxy_container_gateway-0:1.0.7-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat satellite-0:6.11.5-1.el8sat *
Red Hat Satellite 6.11 for RHEL 8 RedHat satellite-clone-0:3.1.1-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat candlepin-0:4.1.18-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat foreman-0:3.3.0.18-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulp-container-0:2.10.10-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulpcore-0:3.18.11-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulp-rpm-0:3.18.9-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actioncable-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionmailbox-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionmailer-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionpack-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actiontext-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionview-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activejob-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activemodel-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activerecord-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activestorage-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activesupport-0:6.0.6-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-foreman_rh_cloud-0:6.0.44-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-foreman_webhooks-0:3.0.5-1.1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-katello-0:4.5.0.22-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-rails-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-railties-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-smart_proxy_container_gateway-0:1.0.7-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat satellite-0:6.12.1-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat satellite-clone-0:3.2.0-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat candlepin-0:4.1.18-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat foreman-0:3.3.0.18-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulp-container-0:2.10.10-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulpcore-0:3.18.11-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat python-pulp-rpm-0:3.18.9-1.el8pc *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actioncable-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionmailbox-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionmailer-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionpack-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actiontext-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-actionview-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activejob-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activemodel-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activerecord-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activestorage-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-activesupport-0:6.0.6-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-foreman_rh_cloud-0:6.0.44-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-foreman_webhooks-0:3.0.5-1.1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-katello-0:4.5.0.22-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-rails-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-railties-0:6.0.6-2.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat rubygem-smart_proxy_container_gateway-0:1.0.7-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat satellite-0:6.12.1-1.el8sat *
Red Hat Satellite 6.12 for RHEL 8 RedHat satellite-clone-0:3.2.0-2.el8sat *
Red Hat Satellite 6.13 for RHEL 8 RedHat candlepin-0:4.2.13-1.el8sat *
Red Hat Single Sign-On 7 RedHat jackson-databind *
Red Hat Single Sign-On 7.6 for RHEL 7 RedHat rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso *
Red Hat Single Sign-On 7.6 for RHEL 8 RedHat rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso *
Red Hat Single Sign-On 7.6 for RHEL 9 RedHat rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso *
RHEL-8 based Middleware Containers RedHat rh-sso-7/sso76-openshift-rhel8:7.6-20 *
RHINT Camel-Q 2.13.2 RedHat jackson-databind *
RHINT Camel-Springboot 3.18.3.P2 RedHat jackson-databind *
RHINT Camel-Springboot 3.20.1 RedHat jackson-databind *
RHOL-5.5-RHEL-8 RedHat openshift-logging/elasticsearch6-rhel8:v6.8.1-273 *
RHOL-5.5-RHEL-8 RedHat openshift-logging/elasticsearch-operator-bundle:v5.5.5-14 *
RHOL-5.5-RHEL-8 RedHat openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-311 *
RHOL-5.5-RHEL-8 RedHat openshift-logging/elasticsearch-rhel8-operator:v5.5.5-2 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/elasticsearch6-rhel8:v6.8.1-285 *
RHPAM 7.13.1 async RedHat jackson-databind *
Jackson-databind Ubuntu bionic *
Jackson-databind Ubuntu esm-apps/bionic *
Jackson-databind Ubuntu esm-apps/focal *
Jackson-databind Ubuntu esm-apps/jammy *
Jackson-databind Ubuntu focal *
Jackson-databind Ubuntu jammy *
Jackson-databind Ubuntu kinetic *
Jackson-databind Ubuntu lunar *
Jackson-databind Ubuntu mantic *
Jackson-databind Ubuntu oracular *
Jackson-databind Ubuntu trusty *
Jackson-databind Ubuntu xenial *

Potential Mitigations

  • Make fields transient to protect them from deserialization.
  • An attempt to serialize and then deserialize a class containing transient fields will result in NULLs where the transient data should be. This is an excellent way to prevent time, environment-based, or sensitive variables from being carried over and used improperly.

References