Unauthenticated RCE in H2 Database Console is similar to Log4Shell

Researchers disclosed a critical RCE flaw in the H2 open-source Java SQL database which is similar to the Log4J vulnerability. Jfrog researchers discovered a critical vulnerability in the H2 open-source Java SQL database related to the Log4Shell Log4J vulnerability. The flaw, tracked as CVE-2021-42392, could allow attackers to execute remote code on vulnerable systems, the […]

The post Unauthenticated RCE in H2 Database Console is similar to Log4Shell appeared first on Security Affairs.

breaking news database h2 h2 database hacking hacking news information security news it information security log4shell pierluigi paganini rce security