Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-10650

A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and org.quartz.utils.JNDIConnectionProvider.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.053
EPSS Ranking 89.4%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2020-10650


Contact Us

Shodan ® - All rights reserved