🏴‍☠️Welcome!
Fundamentals
Tools
Web Exploitation
Post Exploitation
Wireless Exploitation
- Bluetooth
- Wifi
Archive
- 💥CVE Vault

Powered by GitBook

On this page

CVE-2018-14335

H2 Database 1.4.197 - Information Disclosure

PreviousCVE-2021-3345 NextCVE-2018-9276

Last updated 10 months ago

H2 Database 1.4.197 - Information Disclosure - Python - RedHat

Vulnerability: Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via asymlink to a fake database file.

Score: CVSS v2.0: 4 // CVSS v3.x: 6.5

Shows on:

HTB-Teacher

POC:

Resources:

CVE - CVE-2018-14335

NVD - CVE-2018-14335

CVE-2018-14335 · Issue #1294 · h2database/h2databaseGitHub

H2 Database 1.4.197 - Information DisclosureExploit Database