CVE-2018-10054

H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code.

CVSS v3.0 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.exploit-db.com/exploits/44422/	Third Party Advisory VDB Entry
https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html	Third Party Advisory
https://forum.datomic.com/t/important-security-update-0-9-5697/379	Vendor Advisory
http://blog.datomic.com/2018/03/important-security-update.html	Vendor Advisory
https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e@%3Cuser.ignite.apache.org%3E
https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:h2database:h2:1.4.197:::::::*
	cpe:2.3:a:cognitect:datomic::::::::

Information

Published : 2018-04-11 13:29

Updated : 2019-12-13 20:15

NVD link : CVE-2018-10054

Mitre link : CVE-2018-10054

JSON object : View

CWE

CWE-20

Improper Input Validation

Products Affected

h2database

cognitect

datomic

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.exploit-db.com/exploits/44422/", "name": "44422", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "EXPLOIT-DB"}, {"url": "https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html", "name": "https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://forum.datomic.com/t/important-security-update-0-9-5697/379", "name": "https://forum.datomic.com/t/important-security-update-0-9-5697/379", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://blog.datomic.com/2018/03/important-security-update.html", "name": "http://blog.datomic.com/2018/03/important-security-update.html", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e@%3Cuser.ignite.apache.org%3E", "name": "[ignite-user] 20191213 Re: H2 version security concern", "tags": [], "refsource": "MLIST"}, {"url": "https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E", "name": "[nifi-commits] 20200421 svn commit: r1876802 - /nifi/site/trunk/registry-security.html", "tags": [], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2018-10054", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}}, "publishedDate": "2018-04-11T20:29Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:h2database:h2:1.4.197:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:cognitect:datomic:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "0.9.5697"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2019-12-14T04:15Z"}

8.8 /10