Improper Privilege Management in Neo4j Graph Database

2022-05-2419:09:23

Google

osv.dev

0.001 Low

EPSS

Percentile

42.1%

JSON

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges.

CPENameOperatorVersion
org.neo4j:neo4j-kerneleq4.2.0
org.neo4j:neo4j-kerneleq4.2.4
org.neo4j:neo4j-kerneleq4.2.5
org.neo4j:neo4j-kerneleq4.2.7
org.neo4j:neo4j-kerneleq4.2.3
org.neo4j:neo4j-kerneleq4.2.6
org.neo4j:neo4j-kerneleq4.2.2
org.neo4j:neo4j-kerneleq4.2.1

Name	Operator	Version
org.neo4j:neo4j-kernel	eq	4.2.0
org.neo4j:neo4j-kernel	eq	4.2.4
org.neo4j:neo4j-kernel	eq	4.2.5
org.neo4j:neo4j-kernel	eq	4.2.7
org.neo4j:neo4j-kernel	eq	4.2.3
org.neo4j:neo4j-kernel	eq	4.2.6
org.neo4j:neo4j-kernel	eq	4.2.2
org.neo4j:neo4j-kernel	eq	4.2.1