CVE-2018-14335

An issue was discovered in H2 1.4.197

Medium · published July 24, 2018

CVSS v3.1
6.5
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.13224 · 96.4th percentile
Published
2018-07-24T13:00Z
EPSS history
Timeline
  • 24 JUL 13:00Z
    An issue was discovered in H2 1.4.197
    cvelistv5