PT-2022-2140 · H2+3 · H2 Database Console+4

Published

2022-01-19

·

Updated

2024-06-13

·

CVE-2022-23221

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions H2 Console versions prior to 2.1.210 H2 Database Console (affected versions not specified)
Description The issue is related to incorrect code generation management in the H2 database management system. It can be exploited by a remote attacker to execute arbitrary code using the jdbc:h2:mem function with specific settings: IGNORE UNKNOWN SETTINGS=TRUE;FORBID CREATION=FALSE;INIT=RUNSCRIPT. This allows for remote code execution via a JDBC URL containing these settings.
Recommendations For H2 Console versions prior to 2.1.210, update to version 2.1.210 or later to resolve the issue. As a temporary workaround, consider disabling the jdbc:h2:mem function or restricting its use with the specified settings until a patch is available. Avoid using the INIT=RUNSCRIPT setting in the affected API endpoint until the issue is resolved. Restrict access to the H2 Console to minimize the risk of exploitation.

Exploit

Fix

RCE

Code Injection

Argument Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2022-02030
CVE-2022-23221
DLA-2923-1
DSA-5076-1
GHSA-45HX-WFHJ-473X
RHSA-2022:4918
RHSA-2022:4919
RHSA-2024:10207
RHSA-2024:10208
USN-5365-1
USN-6834-1

Affected Products

Astra Linux
H2 Console
H2 Database Console
Linuxmint
Ubuntu