CVE-2006-7217 in Apache Derby
Summary
Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.
Reservation
07/05/2007
Disclosure
07/05/2007
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 37647 | Apache Derby Authorization | Not defined | Official fix | CVE-2006-7217 |