CVE-2018-14335

CVSS 6.5 MEDIUMEPSS 13.4%CWE-276

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45105/unverified exploitdbwww.exploit-db.com/exploits/45105unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://access.redhat.com/errata/RHSA-2020:0727 https://gist.github.com/owodelta/9714faf9a86435cef5a99d4930eaee20 https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E https://security.netapp.com/advisory/ntap-20240726-0003/https://www.exploit-db.com/exploits/45105/