CVE-2006-7217

Description

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

Risk Information

Base Score

8.8

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.508

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2006-7217 are fixed in Apache-derby 10.2.1.6	Windows
Vulnerabilities CVE-2006-7217 are fixed in Apache-derby for Linux 10.2.1.6	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234