CVE-2018-14335: h2database h2
Vulnerability summary
CVE-2018-14335 is a medium (CVSS 6.5) vulnerability in h2database h2. EPSS estimates a 13.22% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities. 2 public exploits are recorded.
Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 24-07-2018PublishedVulnerability first disclosed.
- 29-10-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.
CVSS metrics
6 scores · 3 sources · 3 versions- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
13.22%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 13.22% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 found9714Faf9A86435Cef5A99D4930Eaee20
Maturity: poc
H2 Database 1.4.197 - Information Disclosure
Maturity: poc
Weaknesses
CWE · root cause- CWE-59Improper Link Resolution Before File AccessThe product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
- CWE-276Incorrect Default PermissionsDuring installation, installed file permissions are set to allow anyone to modify those files.
Affected systems
Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
H2database1 product
- h21.4.197
Ubuntu1 product
- h2databaseAll versions (No fix recorded)
2 vendors · 2 products
References
7 links- lists.apache.org/thread.html/…Mailing List
- access.redhat.com/errata/RHSA-2020:0727Vendor Advisory