{"id":"CVE-2018-14335","aliases":["EUVD-2018-6257","GHSA-wm64-883p-84j3","UBUNTU-CVE-2018-14335"],"status":"published","title":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function...","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13224,"percentile":0.96403,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-276","CWE-277","CWE-59"],"published":"2018-07-24T13:00:00Z","modified":"2026-10-24T10:31:03Z","exploits":[{"source":"exploitdb","id":"EDB-45105","title":"H2 Database 1.4.197 - Information Disclosure","type":"webapps","platform":"linux","date":"2018-07-30","url":"https://www.exploit-db.com/exploits/45105"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.185-1","1.4.185-2","1.4.190-1","1.4.191-1","1.4.191-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.196-1","1.4.196-2","1.4.196-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.197-4","1.4.197-4+deb10u1build0.20.04.1"]}],"products":[{"vendor":"h2database","product":"h2"}],"references":[{"url":"https://www.exploit-db.com/exploits/45105/","tags":["exploit","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://gist.github.com/owodelta/9714faf9a86435cef5a99d4930eaee20","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0727","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240726-0003/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14335"},{"url":"https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e@%3Cuser.ignite.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20240726-0003"},{"url":"https://www.exploit-db.com/exploits/45105"},{"url":"https://github.com/advisories/GHSA-wm64-883p-84j3"},{"url":"https://ubuntu.com/security/CVE-2018-14335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14335","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-14335","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-10-29T13:55:12.14Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6257","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-10-29T13:55:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:15.24326Z"}],"ghsa":[{"id":"GHSA-wm64-883p-84j3","title":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function...","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2022-05-13T01:19:07Z","modified":"2024-10-29T15:33:02Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-59","CWE-276","CWE-277"],"updated_at":"2026-11-02T14:58:38.070803Z"}],"nvd":[{"id":"CVE-2018-14335","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2018-07-24T13:29:00.603Z","modified":"2026-06-17T01:40:49.313Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-59","CWE-276"],"updated_at":"2026-11-02T14:04:33.865124Z"}],"osv":[{"id":"CVE-2018-14335","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2018-07-24T13:29:00.603Z","modified":"2026-10-24T10:31:03.807621495Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"UBUNTU-CVE-2018-14335","description":"An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","status":"published","published":"2018-07-24T13:29:00Z","modified":"2025-10-24T04:47:08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:17.014176Z"}]}}