CVE-2006-7216 | BDVDB-2026-25087 Detail

Description#

Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which allows remote authenticated users to lock arbitrary tables.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://issues.apache.org/jira/browse/DERBY-1708
http://db.apache.org/derby/releases/release-10.2.1.6.html

Exploit#

No public exploit known

History#

Version 12007-07-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.