Serialization Vulnerability in FasterXML Jackson Databind Affecting Multiple Versions
CVE-2020-36186
8.1HIGH
What is CVE-2020-36186?
FasterXML Jackson Databind prior to version 2.9.10.8 contains a vulnerability that mismanages serialization gadgets and typing interactions. This flaw is associated with the datasources component known as PerUserPoolDataSource in Apache Tomcat. Attackers may exploit this to affect application data flows, emphasizing the necessity for versions to be updated to mitigate potential risks and enhance security.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved