CVE-2020-36179

Scores

EPSS

0.603medium60.3%
0%20%40%60%80%100%

Percentile: 60.3%

CVSS

8.1high3.x
0246810

CVSS Score: 8.1/10

All CVSS Scores

CVSS 3.x
8.1

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdubuntu

CWEs

CWE-502

Related Vulnerabilities

Exploits

Exploit ID: CVE-2020-36179

Source: github-poc

URL: https://github.com/Al1ex/CVE-2020-36179

Vulnerable Software (57)

Type: Configuration

Product: jackson-databind

Operating System: debian

Trait:
{  "fixed": "2.12.1-1"}

Source: debian

Type: Configuration

Product: jackson-databind

Operating System: debian buster 10

Trait:
{  "fixed": "2.9.8-3+deb10u3"}

Source: debian

Type: Configuration

Product: jackson-databind

Operating System: ubuntu bionic 18.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu focal 20.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu groovy 20.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu hirsute 21.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu impish 21.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu kinetic 22.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu lunar 23.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu mantic 23.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu oracular 24.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu plucky 25.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu trusty 14.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: jackson-databind

Operating System: ubuntu xenial 16.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Vendor: *

Product: agile_plm

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd

Type: Configuration

Vendor: *

Product: application_testing_suite

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd

Type: Configuration

Vendor: *

Product: autovue_for_agile_product_lifecycle_management

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd

Type: Configuration

Vendor: *

Product: banking_corporate_lending_process_management

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd

Type: Configuration

Vendor: *

Product: banking_credit_facilities_process_management

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd

Type: Configuration

Vendor: *

Product: banking_supply_chain_finance

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:oracle:application_testing_suite:13.3.0....

Source: nvd