SQL injection in Hibernate ORM - CVE-2019-14900

Vulnerability identifier: #VU75568

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-14900

CWE-ID: CWE-89

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data within implementation of the JPA Criteria API. A remote user can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Hibernate ORM
openEuler
hibernate3
hibernate3-c3p0
hibernate3-proxool
hibernate3-testing
hibernate3-help
hibernate3-ehcache
hibernate3-envers
hibernate3-entitymanager
hibernate4-osgi
hibernate4-entitymanager
hibernate4-envers
hibernate4-infinispan
hibernate4-parent
hibernate4-ehcache
hibernate4-proxool
hibernate4-hikaricp
hibernate4-core
hibernate4-testing
hibernate4-javadoc
hibernate4
hibernate4-c3p0
hibernate
CloudLink
IBM Security Verify Governance

Install update from vendor's website.

Hibernate ORM - addressed in versions 5.3.18, 5.4.18
hibernate3 - update to 3.6.10-25
hibernate3-c3p0 - update to 3.6.10-25
hibernate3-proxool - update to 3.6.10-25
hibernate3-testing - update to 3.6.10-25
hibernate3-help - update to 3.6.10-25
hibernate3-ehcache - update to 3.6.10-25
hibernate3-envers - update to 3.6.10-25
hibernate3-entitymanager - update to 3.6.10-25
hibernate4-osgi - update to 4.3.11-3
hibernate4-entitymanager - update to 4.3.11-3
hibernate4-envers - update to 4.3.11-3
hibernate4-infinispan - update to 4.3.11-3
hibernate4-parent - update to 4.3.11-3
hibernate4-ehcache - update to 4.3.11-3
hibernate4-proxool - update to 4.3.11-3
hibernate4-hikaricp - update to 4.3.11-3
hibernate4-core - update to 4.3.11-3
hibernate4-testing - update to 4.3.11-3
hibernate4-javadoc - update to 4.3.11-3
hibernate4 - update to 4.3.11-3
hibernate4-c3p0 - update to 4.3.11-3
hibernate - update to 5.0.10-8
CloudLink - update to 8.0-3.10.5.1
IBM Security Verify Governance - update to 10.0.1.0.2

• https://bugzilla.redhat.com/show_bug.cgi?id=1666499
• https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E
• https://security.netapp.com/advisory/ntap-20220210-0020/

• SQL injection in Hibernate ORM
• Multiple vulnerabilities in Dell CloudLink
• openEuler 20.03 LTS SP1 update for hibernate
• openEuler 20.03 LTS SP1 update for hibernate3
• openEuler 20.03 LTS SP1 update for hibernate4
• Multiple vulnerabilities in IBM Security Verify Governance