Non évaluée

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of th...

CVE-2018-14335 Première détection SecPulse Jul 24, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory access.redhat.com
advisory security.netapp.com
report gist.github.com
report exploit-db.com
web lists.apache.org

Faits clés

Gravité: Non évaluée
Publication: Jul 24, 2018
Première détection SecPulse: Jul 24, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50