Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jboss EAP Deserialization of Untrusted Data Vulnerability - CVE-2019-17267 - Vulnerability Database
Jboss EAP

Jboss EAP Deserialization of Untrusted Data Vulnerability - CVE-2019-17267

Critical
Reference: CVE-2019-17267
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-17267
Title: Jboss EAP Deserialization of Untrusted Data Vulnerability
Overview:

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.