Lucene search
Veracode Vulnerability DatabaseVERACODE:7790HistoryNov 14, 2018 - 3:10 a.m.
Information Disclosure
2018-11-1403:10:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
21.9%
Apache Derby is vulnerable to information disclosure. A context-dependent attacker is able to retrieve the cleartext user and password attributes are exposed via the RDBNAM parameter of the ACCSEC command and the output of the DatabaseMetaData.getURL function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache derby database engine and embedded jdbc driver | eq | 10.1.1.0 | |
| apache derby client jdbc driver | eq | 10.1.1.0 |
Related
github
github
Apache Derby exposes user and password attributes
2022-05-01 02:31:27
cve
cve
CVE-2005-4849
2022-10-03 16:22:45
debiancve
debiancve
CVE-2005-4849
2022-10-03 16:22:45
osv
osv
Apache Derby exposes user and password attributes
2022-05-01 02:31:27
nvd
nvd
CVE-2005-4849
2005-12-31 05:00:00
cvelist
cvelist
CVE-2005-4849
2022-10-03 16:22:45