CVE-2018-14335

2018-07-2413:00:00

mitre

github.com

AI Score

6.8

Confidence

Low

EPSS

0.017

Percentile

88.0%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:h2database:h2:1.4.197:*:*:*:*:*:*:*"
    ],
    "vendor": "h2database",
    "product": "h2",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.197"
      }
    ],
    "defaultStatus": "unknown"
  }
]