PT-2020-9626 · Unknown+1 · Hibernate Orm+1

Published 2020-07-06 · Updated 2022-04-29 · CVE-2019-14900

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hibernate ORM versions prior to 5.3.18 Hibernate ORM versions prior to 5.4.18 Hibernate ORM versions prior to 5.5.0.Beta1

Description A flaw was found in the implementation of the JPA Criteria API, permitting unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This could allow an attacker to access unauthorized information or possibly conduct further attacks.

Recommendations For versions prior to 5.3.18, update to version 5.3.18 or later. For versions prior to 5.4.18, update to version 5.4.18 or later. For versions prior to 5.5.0.Beta1, update to version 5.5.0.Beta1 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-14900

GHSA-8GRG-Q944-CCH5

OESA-2021-1135

OESA-2021-1136

OESA-2021-1137

RHSA-2020:3461

RHSA-2020:3462

RHSA-2020:3463

RHSA-2020:3637

RHSA-2020:3638

RHSA-2020:3639

SUSE-SU-2020:2650-1

SUSE-SU-2020:2832-1

Affected Products

Hibernate Orm

Suse

References · 75

• 🔥 https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2020:2650-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14900 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:2832-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1135 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1137 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1136 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8grg-q944-cch5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14900 · Vendor Advisory
• https://github.com/hibernate/hibernate-orm · Note
• https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f · Note
• https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4 · Note
• https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da · Note
• https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36 · Note
• https://bugzilla.suse.com/1151557 · Note