Published: 24/07/2018 Updated: 07/11/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

An issue exists in H2 1.4.197. Insecure handling of permissions in the backup function allows malicious users to read sensitive files (outside of their permissions) via a symlink to a fake database file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
h2database h2 1.4.197

Synopsis Important: Red Hat Data Grid 733 security update Type/Severity Security Advisory: Important Topic An update for Red Hat Data Grid is now availableRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, whic ...

An issue was discovered in H2 14197 Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file ...

Multiple vulnerabilities have been found in Hitachi Ops Center Analyzer viewpoint CVE-2018-10054, CVE-2018-14335, CVE-2018-20200, CVE-2019-10086, CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, CVE-2019-14439, CVE-2019-14540, CVE-2019-14892, CVE-2019-14893, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943, CVE-2019-17267, CVE-2019- ...

# Exploit Title: H2 Database 14197 - Information Disclosure # Date: 2018-07-16 # Exploit Author: owodelta # Vendor Homepage: wwwh2databasecom # Software Link: wwwh2databasecom/html/downloadhtml # Version: all versions # Tested on: Linux # CVE : CVE-2018-14335 # Description: Insecure handling of permissions in the backup function allo ...

H2 Database version 14197 suffers from an information disclosure vulnerability ...

Examples of Usage for Sonatype Scan Gradle Plugin This a demo repository showing how to use the Scan Gradle Plugin to analyze open source dependencies in Gradle projects A dependency with vulnerabilities was added to show how the output looks like The file buildgradle has a simple Gradle setup applying the plugin For more options to configure (including usage with credentia

CWE-59 https://gist.github.com/owodelta/9714faf9a86435cef5a99d4930eaee20 https://www.exploit-db.com/exploits/45105/https://access.redhat.com/errata/RHSA-2020:0727 https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E https://access.redhat.com/errata/RHSA-2020:0727 https://nvd.nist.gov https://www.exploit-db.com/exploits/45105/https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-109/index.html

CVE-2018-14335

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect