CVE-2020-10673 - jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

Back Back to CVE browser

HIGH

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

Published Mar 18, 2020

8.8

HIGH

CVSS 3.1

EPSS 8.03%

Description

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

Affected products

Vendor Debian Product Debian Linux Default
n/a
- Version
  8.0
  Status
  affected
  Constraints
  -
Vendor Fasterxml Product Jackson-Databind Default
n/a
- Version
  2.0.0
  Status
  affected
  Constraints
  <2.9.10.4
Vendor NetApp Product Steelstore Cloud Integrated Storage Default
n/a
Vendor Oracle Product Agile Plm Default
n/a
- Version
  9.3.6
  Status
  affected
  Constraints
  -
Vendor Oracle Product Autovue for Agile Product Lifecycle Management Default
n/a
- Version
  21.0.2
  Status
  affected
  Constraints
  -
Vendor Oracle Product Banking Digital Experience Default
n/a
- Version
  18.1
  Status
  affected
  Constraints
  <=18.3
- Version
  19.1
  Status
  affected
  Constraints
  <=19.2
- Version
  2.4.0
  Status
  affected
  Constraints
  <=2.9.0
- Version
  20.1
  Status
  affected
  Constraints
  -
Vendor Oracle Product Communications Calendar Server Default
n/a
- Version
  8.0.0.4.0
  Status
  affected
  Constraints
  <=8.0.0.5.0
Vendor Oracle Product Communications Diameter Signaling Router Default
n/a
- Version
  8.0.0
  Status
  affected
  Constraints
  <=8.2.2
Vendor Oracle Product Communications Element Manager Default
n/a
- Version
  8.2.0
  Status
  affected
  Constraints
  <=8.2.2
Vendor Oracle Product Communications Evolved Communications Application Server Default
n/a
- Version
  7.1
  Status
  affected
  Constraints
  -
Vendor Oracle Product Communications Instant Messaging Server Default
n/a
- Version
  10.0.1.4.0
  Status
  affected
  Constraints
  -
Vendor Oracle Product Communications Network Charging and Control Default
n/a
- Version
  12.0.0
  Status
  affected
  Constraints
  <=12.0.3
- Version
  6.0.1
  Status
  affected
  Constraints
  -
Vendor Oracle Product Communications Session Route Manager Default
n/a
- Version
  8.2.0
  Status
  affected
  Constraints
  <=8.2.2
Vendor Oracle Product Enterprise Manager Base Platform Default
n/a
- Version
  13.3.0.0
  Status
  affected
  Constraints
  <=13.4.0.0
Vendor Oracle Product Financial Services Analytical Applications Infrastructure Default
n/a
- Version
  8.0.6
  Status
  affected
  Constraints
  <=8.1.0
Vendor Oracle Product Financial Services Institutional Performance Analytics Default
n/a
- Version
  8.0.6
  Status
  affected
  Constraints
  -
- Version
  8.0.7
  Status
  affected
  Constraints
  -
- Version
  8.1.0
  Status
  affected
  Constraints
  -
Vendor Oracle Product Financial Services Price Creation and Discovery Default
n/a
- Version
  8.0.6
  Status
  affected
  Constraints
  <=8.0.7
Vendor Oracle Product Financial Services Retail Customer Analytics Default
n/a
- Version
  8.0.6
  Status
  affected
  Constraints
  -
Vendor Oracle Product Global Lifecycle Management Opatch Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=12.2.0.1.20
Vendor Oracle Product Insurance Policy Administration J2ee Default
n/a
- Version
  11.0.2.25
  Status
  affected
  Constraints
  <11.1.0.15
Vendor Oracle Product JD Edwards Enterpriseone Orchestrator Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=9.2.4.2
Vendor Oracle Product Primavera Unifier Default
n/a
- Version
  16.1
  Status
  affected
  Constraints
  -
- Version
  16.2
  Status
  affected
  Constraints
  -
- Version
  17.7
  Status
  affected
  Constraints
  <=17.12
- Version
  18.8
  Status
  affected
  Constraints
  -
- Version
  19.12
  Status
  affected
  Constraints
  -
Vendor Oracle Product Retail Merchandising System Default
n/a
- Version
  15.0
  Status
  affected
  Constraints
  -
Vendor Oracle Product Retail Sales Audit Default
n/a
- Version
  14.1
  Status
  affected
  Constraints
  -
Vendor Oracle Product Retail Service Backbone Default
n/a
- Version
  14.1
  Status
  affected
  Constraints
  -
- Version
  15.0
  Status
  affected
  Constraints
  -
- Version
  16.0
  Status
  affected
  Constraints
  -
Vendor Oracle Product Retail Xstore Point of Service Default
n/a
- Version
  15.0
  Status
  affected
  Constraints
  <=19.0
Vendor Oracle Product Weblogic Server Default
n/a
- Version
  12.2.1.3.0
  Status
  affected
  Constraints
  <=12.2.1.4.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Debian

Debian Linux

n/a

Version	Status	Constraints
8.0	affected	-

Fasterxml

Jackson-Databind

n/a

Version	Status	Constraints
2.0.0	affected	<2.9.10.4

NetApp

Steelstore Cloud Integrated Storage

n/a

Version	Status	Constraints

Oracle

Agile Plm

n/a

Version	Status	Constraints
9.3.6	affected	-

Oracle

Autovue for Agile Product Lifecycle Management

n/a

Version	Status	Constraints
21.0.2	affected	-

Oracle

Banking Digital Experience

n/a

Version	Status	Constraints
18.1	affected	<=18.3
19.1	affected	<=19.2
2.4.0	affected	<=2.9.0
20.1	affected	-

Oracle

Communications Calendar Server

n/a

Version	Status	Constraints
8.0.0.4.0	affected	<=8.0.0.5.0

Oracle

Communications Diameter Signaling Router

n/a

Version	Status	Constraints
8.0.0	affected	<=8.2.2

Oracle

Communications Element Manager

n/a

Version	Status	Constraints
8.2.0	affected	<=8.2.2

Oracle

Communications Evolved Communications Application Server

n/a

Version	Status	Constraints
7.1	affected	-

Oracle

Communications Instant Messaging Server

n/a

Version	Status	Constraints
10.0.1.4.0	affected	-

Oracle

Communications Network Charging and Control

n/a

Version	Status	Constraints
12.0.0	affected	<=12.0.3
6.0.1	affected	-

Oracle

Communications Session Route Manager

n/a

Version	Status	Constraints
8.2.0	affected	<=8.2.2

Oracle

Enterprise Manager Base Platform

n/a

Version	Status	Constraints
13.3.0.0	affected	<=13.4.0.0

Oracle

Financial Services Analytical Applications Infrastructure

n/a

Version	Status	Constraints
8.0.6	affected	<=8.1.0

Oracle

Financial Services Institutional Performance Analytics

n/a

Version	Status	Constraints
8.0.6	affected	-
8.0.7	affected	-
8.1.0	affected	-

Oracle

Financial Services Price Creation and Discovery

n/a

Version	Status	Constraints
8.0.6	affected	<=8.0.7

Oracle

Financial Services Retail Customer Analytics

n/a

Version	Status	Constraints
8.0.6	affected	-

Oracle

Global Lifecycle Management Opatch

n/a

Version	Status	Constraints
0	affected	<=12.2.0.1.20

Oracle

Insurance Policy Administration J2ee

n/a

Version	Status	Constraints
11.0.2.25	affected	<11.1.0.15

Oracle

JD Edwards Enterpriseone Orchestrator

n/a

Version	Status	Constraints
0	affected	<=9.2.4.2

Oracle

Primavera Unifier

n/a

Version	Status	Constraints
16.1	affected	-
16.2	affected	-
17.7	affected	<=17.12
18.8	affected	-
19.12	affected	-

Oracle

Retail Merchandising System

n/a

Version	Status	Constraints
15.0	affected	-

Oracle

Retail Sales Audit

n/a

Version	Status	Constraints
14.1	affected	-

Oracle

Retail Service Backbone

n/a

Version	Status	Constraints
14.1	affected	-
15.0	affected	-
16.0	affected	-

Oracle

Retail Xstore Point of Service

n/a

Version	Status	Constraints
15.0	affected	<=19.0

Oracle

Weblogic Server

n/a

Version	Status	Constraints
12.2.1.3.0	affected	<=12.2.1.4.0

EAP-CD 20 Tech Preview

jackson-databind

Fixed · RHSA-2020:3585
Red Hat Data Grid 7.3.7

jackson-databind

Fixed · RHSA-2020:3779
Red Hat Decision Manager 7

jackson-databind

Fixed · RHSA-2020:3196
Red Hat Enterprise Linux 8

pki-core:10.6-8020020200326162741.c7c3114f

Fixed · RHSA-2020:1644
Red Hat Enterprise Linux 8

pki-deps:10.6-8020020191204213056.6a468ee4

Fixed · RHSA-2020:1644
Red Hat Fuse 7.7.0

jackson-databind

Fixed · RHSA-2020:3192
Red Hat JBoss Enterprise Application Platform 7

jackson-databind

Fixed · RHSA-2020:3464
Red Hat JBoss Enterprise Application Platform 7

jackson-databind

Fixed · RHSA-2020:3642
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

eap7-jackson-databind-0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7

Fixed · RHSA-2025:1746
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

eap7-resteasy-0:3.0.27-1.Final_redhat_00001.1.ep7.el7

Fixed · RHSA-2025:1746
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6

eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7

eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8

eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el6eap

Fixed · RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el7eap

Fixed · RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-dom4j-0:2.1.3-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8

eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el8eap

Fixed · RHSA-2020:3463
Red Hat Process Automation 7

jackson-databind

Fixed · RHSA-2020:3197
Red Hat Single Sign-On 7.4.2

jackson-databind

Fixed · RHSA-2020:3501
Text-Only RHOAR

n/a

Fixed · RHSA-2020:2067
Red Hat BPM Suite 6

jackson-databind

Out of support scope
Red Hat JBoss A-MQ 6

jackson-databind

Out of support scope
Red Hat JBoss BRMS 6

jackson-databind

Out of support scope
Red Hat JBoss Data Virtualization 6

jackson-databind

Out of support scope
Red Hat JBoss Enterprise Application Platform 6

jackson-databind

Not affected
Red Hat JBoss Fuse 6

jackson-databind

Out of support scope
Red Hat OpenShift Application Runtimes

jackson-databind

Not affected
Red Hat OpenShift Container Platform 3.11

openshift3/ose-logging-elasticsearch5

Will not fix
Red Hat OpenShift Container Platform 4

openshift4/ose-logging-elasticsearch5

Will not fix
Red Hat OpenStack Platform 10 (Newton)

opendaylight

Out of support scope
Red Hat OpenStack Platform 13 (Queens)

opendaylight

Will not fix
Red Hat Software Collections

rh-maven35-jackson-databind

Will not fix
streams for Apache Kafka

jackson-databind

Not affected

Product	Package	State	Advisory
EAP-CD 20 Tech Preview	jackson-databind	Fixed	RHSA-2020:3585
Red Hat Data Grid 7.3.7	jackson-databind	Fixed	RHSA-2020:3779
Red Hat Decision Manager 7	jackson-databind	Fixed	RHSA-2020:3196
Red Hat Enterprise Linux 8	pki-core:10.6-8020020200326162741.c7c3114f	Fixed	RHSA-2020:1644
Red Hat Enterprise Linux 8	pki-deps:10.6-8020020191204213056.6a468ee4	Fixed	RHSA-2020:1644
Red Hat Fuse 7.7.0	jackson-databind	Fixed	RHSA-2020:3192
Red Hat JBoss Enterprise Application Platform 7	jackson-databind	Fixed	RHSA-2020:3464
Red Hat JBoss Enterprise Application Platform 7	jackson-databind	Fixed	RHSA-2020:3642
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7	eap7-jackson-databind-0:2.8.11.6-2.SP1_redhat_00002.1.ep7.el7	Fixed	RHSA-2025:1746
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7	eap7-resteasy-0:3.0.27-1.Final_redhat_00001.1.ep7.el7	Fixed	RHSA-2025:1746
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6	eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3637
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7	eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3638
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-elytron-web-0:1.2.5-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-glassfish-jsf-0:2.3.5-13.SP3_redhat_00011.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-hal-console-0:3.0.23-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jackson-databind-0:2.9.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-jsf-api_2.3_spec-0:2.3.5-7.SP2_redhat_00005.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-modules-0:1.8.10-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-server-migration-0:1.3.1-13.Final_redhat_00014.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-jboss-xnio-base-0:3.7.6-4.SP3_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-resteasy-0:3.6.1-10.SP9_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-weld-core-0:3.0.6-4.Final_redhat_00004.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-wildfly-0:7.2.9-4.GA_redhat_00003.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-wildfly-elytron-0:1.6.8-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8	eap7-wildfly-transaction-client-0:1.1.11-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3639
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el6eap	Fixed	RHSA-2020:3461
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el7eap	Fixed	RHSA-2020:3462
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-dom4j-0:2.1.3-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-elytron-web-0:1.6.2-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-glassfish-jsf-0:2.3.9-11.SP11_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-hal-console-0:3.2.9-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-hibernate-0:5.3.17-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-hibernate-validator-0:6.0.20-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-infinispan-0:9.4.19-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-ironjacamar-0:1.4.22-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-annotations-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-core-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-databind-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-jaxrs-providers-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-modules-base-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jackson-modules-java8-0:2.10.4-1.redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jboss-genericjms-0:2.0.6-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jboss-jsf-api_2.3_spec-0:3.0.0-4.SP04_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jboss-logmanager-0:2.1.15-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jboss-server-migration-0:1.7.1-7.Final_redhat_00009.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-jboss-xnio-base-0:3.7.8-1.SP1_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-netty-0:4.1.48-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-undertow-0:2.0.30-4.SP4_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-wildfly-0:7.3.2-4.GA_redhat_00002.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-wildfly-common-0:1.5.2-1.Final_redhat_00002.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-wildfly-elytron-0:1.10.7-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8	eap7-wildfly-http-client-0:1.0.22-1.Final_redhat_00001.1.el8eap	Fixed	RHSA-2020:3463
Red Hat Process Automation 7	jackson-databind	Fixed	RHSA-2020:3197
Red Hat Single Sign-On 7.4.2	jackson-databind	Fixed	RHSA-2020:3501
Text-Only RHOAR	n/a	Fixed	RHSA-2020:2067
Red Hat BPM Suite 6	jackson-databind	Out of support scope	n/a
Red Hat JBoss A-MQ 6	jackson-databind	Out of support scope	n/a
Red Hat JBoss BRMS 6	jackson-databind	Out of support scope	n/a
Red Hat JBoss Data Virtualization 6	jackson-databind	Out of support scope	n/a
Red Hat JBoss Enterprise Application Platform 6	jackson-databind	Not affected	n/a
Red Hat JBoss Fuse 6	jackson-databind	Out of support scope	n/a
Red Hat OpenShift Application Runtimes	jackson-databind	Not affected	n/a
Red Hat OpenShift Container Platform 3.11	openshift3/ose-logging-elasticsearch5	Will not fix	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-logging-elasticsearch5	Will not fix	n/a
Red Hat OpenStack Platform 10 (Newton)	opendaylight	Out of support scope	n/a
Red Hat OpenStack Platform 13 (Queens)	opendaylight	Will not fix	n/a
Red Hat Software Collections	rh-maven35-jackson-databind	Will not fix	n/a
streams for Apache Kafka	jackson-databind	Not affected	n/a

Remediation

Red Hat statement

Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time. Additionally, the gadget is not available within Red Hat Openstack Platform's OpenDaylight. While OpenShift Container Platform's elasticsearch plugins do ship the vulnerable component, it doesn't do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.

Weaknesses (2)

CWE-502

Deserialization of Untrusted Data

CWE-96

References (16)

https://access.redhat.com/security/cve/CVE-2020-10673
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1815470
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0423
Advisory
https://github.com/FasterXML/jackson-databind/commit/1645efbd392989cf015f459a91c999e59c921b15
https://github.com/FasterXML/jackson-databind/issues/2660
x_refsource_MISCThird Party Advisory
https://github.com/advisories/GHSA-fqwf-pjwf-7vqv
Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
x_refsource_MISC
https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
https://nvd.nist.gov/vuln/detail/CVE-2020-10673
https://security.netapp.com/advisory/ntap-20200403-0002
x_refsource_CONFIRMThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-10673
https://www.oracle.com/security-alerts/cpujan2021.html
x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-10673		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1815470		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0423		Advisory
https://github.com/FasterXML/jackson-databind/commit/1645efbd392989cf015f459a91c999e59c921b15
https://github.com/FasterXML/jackson-databind/issues/2660		x_refsource_MISCThird Party Advisory
https://github.com/advisories/GHSA-fqwf-pjwf-7vqv		Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062		x_refsource_MISC
https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
https://nvd.nist.gov/vuln/detail/CVE-2020-10673
https://security.netapp.com/advisory/ntap-20200403-0002		x_refsource_CONFIRMThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-10673
https://www.oracle.com/security-alerts/cpujan2021.html		x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html		x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html		x_refsource_MISCPatchThird Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html		x_refsource_MISCPatchThird Party Advisory