Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le janvier 07, 2022, 18:00:07

Titre: [Sophos]Log4Shell-like security hole found in popular Java SQL database engine H2
Posté par: igor51 le janvier 07, 2022, 18:00:07

Log4Shell-like security hole found in popular Java SQL database engine H2

"It's Log4Shell, Jim, but not as we know it." How to find and fix a JNDI-based vuln in the H2 Database Engine.
Source: Log4Shell-like security hole found in popular Java SQL database engine H2 (https://nakedsecurity.sophos.com/2022/01/07/log4shell-like-security-hole-found-in-popular-java-sql-database-engine-h2/)