CSOonline

New Log4Shell-like vulnerability impacts H2 Java SQL database

Researchers warn of critical Java flaw impacting the console of the H2 Java SQL database. Users are advised to update their H2 database to mitigate remote code execution risk. Researchers have warned ...
Threat Post

Log4J-Related RCE Flaw in H2 Database Earns Critical Rating

Critical flaw in the H2 open-source Java SQL database are similar to the Log4J vulnerability, but do not pose a widespread threat. Researchers discovered a bug related to the Log4J logging library ...
マイナビニュース

H2 Database Engine、独自のODBCドライバ開発を終了 - DB開発に注力

The H2 Database Engine Projectは3日(米国時間)、H2 Database Engineの最新版となる「H2 Database Engine(以下、H2)1.0 / 2007-08-02」を公開した。H2はJavaで開発されたRDBMS。サーバおよび組み込みの両用途に対応しているのに加え、動作が高速で、ほかのRDBMSが実装していない機能を ...
ZDNet

JFrog researchers find JNDI vulnerability in H2 database consoles similar to Log4Shell

In a blog post, the company said that CVE-2021-42392 should not be as widespread as Log4Shell, even though it is a critical issue with a similar root cause. JFrog explained that the Java Naming and ...