Improper Authentication in Hibernate Validator
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3558US | medium5.0 | — | ||
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java… | ||||
02
references
External citations — patches, advisories, analysis.
- http://rhn.redhat.com/errata/RHSA-2014-1285.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1286.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1287.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1288.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-0125.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2015-0720.htmlWEB
- https://github.com/hibernate/hibernate-validatorPACKAGE
- https://github.com/hibernate/hibernate-validator/commit/2c95d4ea0ef20977be249e31a4a4f4f4f71c945dWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan