● CVE — High
CVE-2019-10086
Vendorredhat, debian, fedoraproject, opensuse, oracleProductjboss enterprise application platform, debian linux, fedora, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, leap, enterprise linux desktop, enterprise linux workstation, agile product lifecycle management, banking platform, nifi, communications billing and revenue management, application testing suite, agile plm, communications convergence, communications design studio, communications billing and revenue management elastic charging engine, blockchain platform, commons beanutils, agile product lifecycle management integration pack, communications cloud native core console, communications cloud native core policy, communications cloud native core unified data repository, communications evolved communications application serverDiscoveredAug 20, 2019UpdatedAug 25, 2026
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.