Arbitrary File Overwrite Affecting org.apache.derby:derby Open this link in a new tab package, versions [,10.6.2.1)
Attack Complexity
Low
Integrity
High
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications-
snyk-id
SNYK-JAVA-ORGAPACHEDERBY-31582
-
published
17 Nov 2017
-
disclosed
11 Jul 2007
-
credit
Unknown
Introduced: 11 Jul 2007
CVE-2010-2232 Open this link in a new tabHow to fix?
Upgrade org.apache.derby:derby
to version 10.6.2.1 or higher.
Overview
org.apache.derby:derby
is a pure Java, standards-based relational database engine.
Affected versions of the package are vulnerable to Arbitrary File Overwrite. In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.