CVE:CVE-2019-10172
CNNVD:CNNVD-201911-1110
jackson-mapper-asl是一款基于Jackson JSON处理器构建的数据映射软件包。
jackson mapper-asl 1.9.x版本中存在代码问题漏洞。远程攻击者可借助特制数据利用该漏洞获取敏感信息。
solution:Upgrade fasterxml jackson-mapper-asl to a higher version than 1.9.13,and avoid the version [1.9.0,1.9.13]; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat jboss_fuse to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade apache spark to a higher version than 3.0.1,and avoid the version 3.0.1