CVE-2006-7216

Currently unrated

Key Information:

Vendor
Apache
Status
Derby
Vendor
CVE Published:
5 July 2007

Summary

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

References

http://issues.apache.org/jira/browse/DERBY-1708
x_refsource_CONFIRM
http://db.apache.org/derby/releases/release-10.2.1.6.html
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.