213 matches found
OrientDB Server Remote Code Execution
A remote code execution vulnerability exists in OrientDB server. The vulnerability is due privilege escalation when the server receives a specially crafted request. A remote attacker can exploit this vulnerability to gain privilege rights and execute arbitrary code...
OrientDB Server Default Credentials (HTTP)
OrientDB is using known default credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orientdb:orientdb"; ifdescription...
OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability
OrientDB does not enforce privilege requirements during SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orientdb:orientdb";...
OrientDB 2.2.2 < 2.2.22 - Remote Code Execution
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OrientDB 2.2.x Remote Code Execution', 'Description' = %q This module leverages a privilege escalation on...
OrientDB 2.2.2 < 2.2.22 - Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OrientDB 2.2.x Remote Code Execution', 'Description' = %q This module leverages a privilege escalation on OrientDB to execute unsandboxed OS...
OrientDB 2.2.x Remote Code Execution Exploit
This Metasploit module leverages a privilege escalation on OrientDB to execute unsandboxed OS commands. All versions from 2.2.2 up to 2.2.22 should be vulnerable. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
OrientDB 2.2.x Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OrientDB 2.2.x Remote Code Execution', 'Description' = %q This module leverages a privilege escalation on OrientDB to execute unsandboxed OS...
OrientDB Access Control Command Execution
The vulnerability of the OrientDB database management system is related to deficiencies in restricting access to certain functions such as “where”, “fetchplan”, and “order by”. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands using a specially...
Remote Code Execution (RCE)
OrientDB Core is vulnerable to remote code execution RCE attacks. Permissions are not enforced on a user executing a statement to the ORole structure containing a where, fetchplan or order by statement. By executing a groovy function where the groovy wrapper doesn't have a sandbox, any system...
Design/Logic Flaw
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
CVE-2017-11467
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
CVE-2017-11467
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
ai.grakn:grakn-orientdb-factory (>=0.7.0, <=0.10.0), ai.grakn:orientdb-factory (>=0.11.0, <=0.16.0) +127 more potentially affected by CVE-2017-11467 via com.orientechnologies:orientdb-core (>=1.0rc9, <=2.2.22)
com.orientechnologies:orientdb-core MAVEN version =1.0rc9, =0.7.0, =0.11.0, =0.0.7, =0.0.1, =0.8, =0.1, =0.1, =0.4, =3.0.0.m1, =0.12, =0.12, =1.0rc9, =1.5.1 and more Source cves: CVE-2017-11467 Source advisory: MEND:CVE-2017-11467...
CVE-2017-11467
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
CVE-2017-11467
OrientDB (through version 2.2.22 ) is vulnerable to Remote Code Execution (RCE) because it fails to enforce privilege requirements during the use of "where" , "fetchplan" , or "order by" clauses. A remote attacker can exploit this deficiency by sending a specially-crafted request to execute arbit...
OrientDB Arbitrary Command Execution Vulnerability
OrientDB is a British company Orient a set of open source NoSQL database management system . The system supports ACID transactions , fast indexes and SQL queries and other features . OrientDB 2.22 and previous versions of a security vulnerability , the vulnerability stems from the program fails t...
CVE-2017-11467
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
CVE-2017-11467: Improper Privilege Management
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...
OrientDB - Code Execution
OrientDB - Code Execution Vulnerability Summary The following advisory reports a vulnerability in OrientDB which allows users of the product to cause it to execute code. OrientDB is a Distributed Graph Database engine with the flexibility of a Document Database all in one product. The first and...
OrientDB - Code Execution
Vulnerability Summary The following advisory reports a vulnerability in OrientDB which allows users of the product to cause it to execute code. OrientDB is a Distributed Graph Database engine with the flexibility of a Document Database all in one product. The first and best scalable,...