Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-25638

Опубликовано: 01 окт. 2020
Источник: redhat
CVSS3: 7.4
EPSS Низкий

Описание

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

Отчет

For Red Hat Process Automation Manager and Red Hat Decision Manager, the kie-server-ee7 zip is primarily for Weblogic/Websphere which is decided to stay on hibernate 5.1.x, it's not possible to make an upgrade to 5.3.x due to technical reasons. For this reason this fix is included only for kie-server-ee7. For this reason there are two components for RHPAM and RHDM.

Меры по смягчению последствий

Set hibernate.use_sql_comments to false, which is the default value, or use named parameters instead of literals. Please refer to details in https://docs.jboss.org/hibernate/orm/5.4/userguide/html_single/Hibernate_User_Guide.html#configurations-logging and https://docs.jboss.org/hibernate/orm/5.4/userguide/html_single/Hibernate_User_Guide.html#sql-query-parameters.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
A-MQ Clients 2hibernate-coreNot affected
Red Hat BPM Suite 6hibernate-coreOut of support scope
Red Hat CodeReady Studio 12hibernate-coreAffected
Red Hat Decision Manager 7hibernate-core-kie-server-ee7Will not fix
Red Hat Integration Camel K 1hibernate-coreNot affected
Red Hat JBoss BRMS 5hibernate-coreOut of support scope
Red Hat JBoss BRMS 6hibernate-coreOut of support scope
Red Hat JBoss Data Virtualization 6hibernate-coreOut of support scope
Red Hat JBoss Enterprise Application Platform 5hibernate-coreOut of support scope
Red Hat JBoss Enterprise Application Platform 6hibernate-coreOut of support scope

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-89
https://bugzilla.redhat.com/show_bug.cgi?id=1881353hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used

EPSS

Процентиль: 66%
0.00519
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
ubuntu
около 5 лет назад

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS3: 7.4
nvd
около 5 лет назад

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS3: 7.4
debian
около 5 лет назад

A flaw was found in hibernate-core in versions prior to and including ...

CVSS3: 7.4
github
почти 4 года назад

SQL injection in hibernate-core

CVSS3: 7.4
fstec
больше 5 лет назад

Уязвимость интерфейса API JPA Criteria службы запросов Hibernate ORM, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

EPSS

Процентиль: 66%
0.00519
Низкий

7.4 High

CVSS3