Vulnerability Details CVE-2014-3558
ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://rhn.redhat.com/errata/RHSA-2014-1285.html
- http://rhn.redhat.com/errata/RHSA-2014-1286.html
- http://rhn.redhat.com/errata/RHSA-2014-1287.html
- http://rhn.redhat.com/errata/RHSA-2014-1288.html
- http://rhn.redhat.com/errata/RHSA-2015-0125.html
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
- https://hibernate.atlassian.net/browse/HV-912
- http://rhn.redhat.com/errata/RHSA-2014-1285.html
- http://rhn.redhat.com/errata/RHSA-2014-1286.html
- http://rhn.redhat.com/errata/RHSA-2014-1287.html
- http://rhn.redhat.com/errata/RHSA-2014-1288.html
- http://rhn.redhat.com/errata/RHSA-2015-0125.html
- http://rhn.redhat.com/errata/RHSA-2015-0720.html
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3558.yaml
- https://hibernate.atlassian.net/browse/HV-912
Products affected by CVE-2014-3558
-
cpe:2.3:a:redhat:hibernate_validator:4.1.0
-
cpe:2.3:a:redhat:hibernate_validator:4.2.0
-
cpe:2.3:a:redhat:hibernate_validator:4.3.0
-
cpe:2.3:a:redhat:hibernate_validator:4.3.1
-
cpe:2.3:a:redhat:hibernate_validator:5.0.0
-
cpe:2.3:a:redhat:hibernate_validator:5.0.1
-
cpe:2.3:a:redhat:hibernate_validator:5.0.2
-
cpe:2.3:a:redhat:hibernate_validator:5.0.3
-
cpe:2.3:a:redhat:hibernate_validator:5.1.0
-
cpe:2.3:a:redhat:hibernate_validator:5.1.1