Information Disclosure

H2 Database Engine is vulnerable to information disclosure. The vulnerability is caused by the webAdminPassword argument, which allows an administrator to specify the password in plaintext. An attacker can get the password for the H2 web admin console by looking at the running processes...

PT-2022-7166 · Unknown +1 · H2 Database Engine +1

Name of the Vulnerable Software and Affected Versions: H2 Database Engine versions prior to 2.2.220 Description: The web-based admin console in H2 Database Engine can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web...