Improper Access Control in Apache Derby

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2010-2232 · ADVISORY
• issues.apache.org/jira/browse/DERBY-2925 · WEB
• db.apache.org/derby/releases/release-10.6.2.1.html · WEB
• securityfocus.com/bid/101562

org.apache.derby:derby のその他の脆弱性

• CVE-2022-46337緊急 9.8A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker …
• CVE-2018-1313中 5.3In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database…
• CVE-2015-1832緊急 9.1XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in plac…
• CVE-2009-4269低 2.1The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformatio…
• CVE-2006-7217中 4.0Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote auth…