[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fehjo2EjczMEb-leTp6kx9EhIiS26b3u7NRSVcrqQbw0":3,"g5a-risk:CVE-2018-14335":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":81,"weaknesses":82,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":27,"otxData":27,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":131,"notableEvents":132},"CVE-2018-14335","What is CVE-2018-14335?","An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.","An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their per...","2018-07-24T13:29:00.603","2024-10-29T14:35:05.543",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[38],{"Source":32,"Type":33,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.13224,[47,47,47,47,47,47,47],"Medium",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"h2database","h2","1.4.197","cpe:2.3:a:h2database:h2:1.4.197:*:*:*:*:*:*:*",1,[58,62,68,72,76],{"url":59,"source":60,"tags":61},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0727","Red Hat",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgist.github.com\u002Fowodelta\u002F9714faf9a86435cef5a99d4930eaee20","GitHub",[66,67],"Exploit","Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E","Apache",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240726-0003\u002F","Netapp",[],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45105\u002F","Exploit-db",[66,67,80],"VDB Entry",5,[83,91],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",{"id":92,"name":93,"description":94,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.",2,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2018-14335? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-14335, a medium severity cyber security vulnerability from 2018. An issue was discovered in H2 1.4.197. Insecure handling ...","CVE-2018-14335, CVE-2018-14335 vulnerability, CVE-2018-14335 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, h2database security, h2 vulnerability","\u002Fwhat-is\u002Fcve-2018-14335",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-14335","Cybersecurity","CVE-2018-14335, CVE-2018-14335 vulnerability, CVE-2018-14335 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124],{"Operator":27,"Negate":27,"Nodes":125},[126],{"Operator":127,"Negate":27,"CPEMatch":128},"OR",[129],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6FDBF217-B702-422A-AAF9-E2B62C92A591",[],[],{"lastModified":11,"cacheTime":134,"version":40},1792372468413,{"score":136,"band":49,"action":137,"scoredAt":138},45,"Plan remediation","2026-10-16T06:44:35.236301+00:00"]