CVE-2006-7217 in Derby
Résumé (Anglaise)
Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
05/07/2007
Divulgation
05/07/2007
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 37647 | Apache Derby Authorization | Non défini | Correctif officiel | CVE-2006-7217 |