CVE-2019-12086

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
13.566

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in Jackson-databind 2.6.7.3Windows
Vulnerabilities CVE-2019-14439,CVE-2019-14379,CVE-2019-12814,CVE-2019-12384,CVE-2019-12086 are fixed in Jackson-databind 2.7.9.6Windows
Vulnerabilities CVE-2019-14439,CVE-2019-14379,CVE-2019-12814,CVE-2019-12384,CVE-2019-12086 are fixed in Jackson-databind 2.8.11.4Windows
Vulnerabilities CVE-2019-12086 are fixed in Jackson-databind 2.9.9Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 5.2.6.5Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.3.4Windows
Multiple Vulnerabilities are affected in IBM Aspera Shares 1.10.1Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.0.6Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.0.2Windows
Multiple vulnerabilities are fixed in Jackson-databind for Linux 2.6.7.3Linux
Vulnerabilities CVE-2019-14439,CVE-2019-14379,CVE-2019-12814,CVE-2019-12384,CVE-2019-12086 are fixed in Jackson-databind for Linux 2.7.9.6Linux
Vulnerabilities CVE-2019-14439,CVE-2019-14379,CVE-2019-12814,CVE-2019-12384,CVE-2019-12086 are fixed in Jackson-databind for Linux 2.8.11.4Linux
Vulnerabilities CVE-2019-12086 are fixed in Jackson-databind for Linux 2.9.9Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234