CVE-2014-3558
CVE-2014-3558
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
EPSS 2.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libhibernate-validator-java Debian:12
- Affected ranges
- ECOSYSTEM: < 4.2.1-2
Update to 4.2.1-2
libhibernate-validator-java Debian:13
- Affected ranges
- ECOSYSTEM: < 4.2.1-2
Update to 4.2.1-2
libhibernate-validator-java Debian:14
- Affected ranges
- ECOSYSTEM: < 4.2.1-2
Update to 4.2.1-2
Original sources
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
- https://hibernate.atlassian.net/browse/HV-912
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- http://rhn.redhat.com/errata/RHSA-2014-1288.html
- http://rhn.redhat.com/errata/RHSA-2015-0125.html
- http://rhn.redhat.com/errata/RHSA-2014-1285.html
- http://rhn.redhat.com/errata/RHSA-2014-1286.html
- http://rhn.redhat.com/errata/RHSA-2014-1287.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-3558