PT-2018-9645 · Atlassian+2 · Bamboo Server+4

Gambler · Published 2018-04-11 · Updated 2024-08-05 · CVE-2018-10054

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: H2 versions 1.4.197 Datomic versions prior to 0.9.5697 Bamboo Data Center and Server versions 9.1.0 through 9.4.0

Description: The issue allows remote code execution because the CREATE ALIAS command can execute arbitrary Java code. This can be exploited by an authenticated attacker to expose assets in the environment, which has a high impact on confidentiality, integrity, and availability. The vendor's position is that H2 is not designed to be run outside of a secure environment.

Recommendations: For H2 version 1.4.197, consider disabling the CREATE ALIAS command until a patch is available. For Datomic versions prior to 0.9.5697, upgrade to version 0.9.5697 or later. For Bamboo Data Center and Server version 9.2, upgrade to a release greater than or equal to 9.2.8. For Bamboo Data Center and Server version 9.3, upgrade to a release greater than or equal to 9.3.6. For Bamboo Data Center and Server version 9.4, upgrade to a release greater than or equal to 9.4.2.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-10054

GHSA-9PF8-QQHM-7W64

Affected Products

Bamboo

Bamboo Server

Datomic

H2

Jira Service Management Server

References · 19

• 🔥 https://exploit-db.com/exploits/44422 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10054 · Security Note
• http://blog.datomic.com/2018/03/important-security-update.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9pf8-qqhm-7w64 · Vendor Advisory
• https://forum.datomic.com/t/important-security-update-0-9-5697/379 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-10054 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10054 · Security Note
• https://github.com/h2database/h2database/issues/1225 · Note
• https://github.com/h2database/h2database/issues/1808#issuecomment-599203115 · Note
• https://github.com/h2database/h2database/issues/3099 · Note
• https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E · Note
• https://t.me/cvenotify/84550 · Telegram Post
• https://lists.apache.org/thread.html/582d4165de6507b0be82d5a6f9a1ce392ec43a00c9fed32bacf7fe1e%40%3Cuser.ignite.apache.org%3E · Note
• https://security.netapp.com/advisory/ntap-20240719-0003 · Note
• https://t.me/cvenotify/86741 · Telegram Post