Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.H2_DATABASE_CVE-2021-42392.NBINHistoryFeb 22, 2022 - 12:00 a.m.
H2 Database JNDI Lookup RCE (CVE-2021-42392)
2022-02-2200:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
159
The remote H2 database is affected by a remote code execution vulnerability by allowing JNDI lookup on user-supplied data. An unauthenticated, remote attacker can pass a specially crafted JNDI driver name and JDBC URL to the org.h2.util.JdbcUtils.getConnection method to cause remote code execution.
Binary data h2_database_cve-2021-42392.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| h2database | h2 | cpe:/a:h2database:h2 |
Related
cnvd
cnvd
H2 database code issue vulnerability
2022-01-11 00:00:00
osv
osv
CVE-2021-42392
2022-01-10 14:10:23
RCE in H2 Console
2022-01-06 23:55:09
h2database - security update
2022-02-15 00:00:00
github
github
RCE in H2 Console
2022-01-06 23:55:09
Arbitrary code execution in H2 Console
2022-01-21 23:07:39
veracode
veracode
Remote Code Execution (RCE)
2022-01-07 09:51:11
ubuntucve
ubuntucve
CVE-2021-42392
2022-01-10 00:00:00
CVE-2022-23221
2022-01-19 00:00:00
prion
prion
Remote code execution
2022-01-10 14:10:00
Design/Logic Flaw
2022-01-19 17:15:00
redhatcve
redhatcve
CVE-2021-42392
2022-01-11 16:53:10
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in H2Database H2
2022-01-09 16:23:16
checkpoint_advisories
checkpoint_advisories
H2 Database Console Remote Code Execution (CVE-2021-42392)
2022-01-23 00:00:00
thn
thn
Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console
2022-01-07 09:31:00
hivepro
hivepro
A similar vulnerability like Log4shell discovered in H2 database console
2022-01-10 16:00:00
cve
cve
CVE-2021-42392
2022-01-10 14:10:00
CVE-2022-23221
2022-01-19 17:15:00
debiancve
debiancve
CVE-2021-42392
2022-01-10 14:10:00
CVE-2022-23221
2022-01-19 17:15:00
openvas
openvas
Debian: Security Advisory (DSA-5076-1)
2022-02-17 00:00:00
Debian: Security Advisory (DLA-2923-1)
2022-02-16 00:00:00
Ubuntu: Security Advisory (USN-5365-1)
2022-04-06 00:00:00
nessus
nessus
Debian DSA-5076-1 : h2database - security update
2022-02-16 00:00:00
Debian DLA-2923-1 : h2database - LTS security update
2022-02-15 00:00:00
Ubuntu 20.04 LTS : H2 vulnerabilities (USN-5365-1)
2022-04-05 00:00:00
threatpost
threatpost
Log4J-Related RCE Flaw in H2 Database Earns Critical Warning
2022-01-07 15:12:26
debian
debian
[SECURITY] [DLA 2923-1] h2database security update
2022-02-15 00:06:01
[SECURITY] [DSA 5076-1] h2database security update
2022-02-15 14:09:18
ubuntu
ubuntu
H2 vulnerabilities
2022-04-05 00:00:00
trellix
trellix
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
Related for H2_DATABASE_CVE-2021-42392.NBIN