Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3ph6-4gjf-m5qj

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

EPSS

Процентиль: 80%
0.0134
Низкий

Связанные уязвимости

nvd
больше 18 лет назад

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

debian
больше 18 лет назад

Apache Derby before 10.2.1.6 does not determine privilege requirements ...

EPSS

Процентиль: 80%
0.0134
Низкий