CVE-2018-10054

H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://blog.datomic.com/2018/03/important-security-update.html	Vendor Advisory
https://forum.datomic.com/t/important-security-update-0-9-5697/379	Vendor Advisory
https://github.com/h2database/h2database/issues/1225
https://github.com/h2database/h2database/issues/1808#issuecomment-599203115
https://github.com/h2database/h2database/issues/3099
https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E
https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E
https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240719-0003/
https://www.exploit-db.com/exploits/44422/	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cognitect:datomic::::::::
	cpe:2.3:a:h2database:h2:1.4.197:::::::*

History

19 Jul 2024, 14:15

Type	Values Removed	Values Added
References		() https://security.netapp.com/advisory/ntap-20240719-0003/ -

Information

Published : 2018-04-11 20:29

Updated : 2024-08-05 08:15

NVD link : CVE-2018-10054

Mitre link : CVE-2018-10054

CVE.ORG link : CVE-2018-10054

JSON object : View

Products Affected

cognitect

datomic

h2database

h2

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2018-10054", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-04-11T20:29:00.860", "references": [{"url": "http://blog.datomic.com/2018/03/important-security-update.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://forum.datomic.com/t/important-security-update-0-9-5697/379", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/h2database/h2database/issues/1225", "source": "cve@mitre.org"}, {"url": "https://github.com/h2database/h2database/issues/1808#issuecomment-599203115", "source": "cve@mitre.org"}, {"url": "https://github.com/h2database/h2database/issues/3099", "source": "cve@mitre.org"}, {"url": "https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E", "source": "cve@mitre.org"}, {"url": "https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E", "source": "cve@mitre.org"}, {"url": "https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.netapp.com/advisory/ntap-20240719-0003/", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/44422/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is \"h2 is not designed to be run outside of a secure environment.\""}, {"lang": "es", "value": "H2 1.4.197, tal y como se usa en Datomic en versiones anteriores a la 0.9.5697 y en otros productos, permite que se ejecute c\u00f3digo de manera remota, ya que CREATE ALIAS puede ejecutar c\u00f3digo Java arbitrario."}], "lastModified": "2024-08-05T08:15:17.300", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cognitect:datomic:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB894B17-ACF8-481B-AB7D-F9B624B7E9AB", "versionEndExcluding": "0.9.5697"}, {"criteria": "cpe:2.3:a:h2database:h2:1.4.197:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FDBF217-B702-422A-AAF9-E2B62C92A591"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}