Medium severity · published Jul 6, 2020
CVE-2019-14900
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1
6.5
CVSS
2.1%
EPSS
No
On KEV
Description
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Build OF Quarkus · Redhat
All versions, or not specified · source: NVD
DM
Decision Manager · Redhat
7.0 · source: NVD
FU
Fuse · Redhat
before 7.8.0 · source: NVD
HO
Hibernate Orm · Hibernate
before 5.3.18; 5.4.0 before 5.4.18 · source: NVD
JD
Jboss Data Grid · Redhat
7.0.0 · source: NVD
JE
Jboss Enterprise Application Platform · Redhat
7.3; 7.4; 7.3; 7.4; 7.3; 7.2; +2 more · source: NVD
JM
Jboss Middleware Text-only Advisories · Redhat
All versions, or not specified · source: NVD
OP
Openstack · Redhat
10; 13; 14 · source: NVD
QU
Quarkus · Quarkus
through 1.5.2 · source: NVD
SS
Single Sign-on · Redhat
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14900
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14900
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1666499
lists.apache.org
https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44%40%3Cdev.turbine.apache.org%3E
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220210-0020/
More from Hibernate Orm
7.4
CVE-2020-25638
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final