CVE-2018-14335 PUBLISHED

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

EPSS 8.45% · 92.3th percentile

Risk Scores

EPSS Score
8.45%
92.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSh2database0, 1.4.185-1, 1.4.185-2
Ubuntu:20.04:LTSh2database1.4.197-4+deb10u1build0.20.04.1, 0, 1.4.197-4
Ubuntu:Pro:18.04:LTSh2database1.4.196-2ubuntu0.1~esm1, 0, 1.4.196-1

Timeline

References

Open in Interactive Console →