Search for packages
| purl | pkg:maven/com.h2database/h2@2.2.220 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-ahev-cr9q-g3d3 | Password exposure in H2 Database The web-based admin console in H2 Database Engine through 2.1.214 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user (or an attacker that has obtained local access through some means) would be able to discover the password by listing processes and their arguments. NOTE: the vendor states "This is not a vulnerability of H2 Console ... Passwords should never be passed on the command line and every qualified DBA or system administrator is expected to know that." |
CVE-2022-45868
GHSA-22wj-vf5f-wrvj |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T02:40:25.586006+00:00 | GHSA Importer | Fixing | VCID-ahev-cr9q-g3d3 | https://github.com/advisories/GHSA-22wj-vf5f-wrvj | 38.4.0 |
| 2026-04-11T14:06:33.100474+00:00 | GHSA Importer | Fixing | VCID-ahev-cr9q-g3d3 | https://github.com/advisories/GHSA-22wj-vf5f-wrvj | 38.3.0 |
| 2026-04-02T14:51:53.998547+00:00 | GHSA Importer | Fixing | VCID-ahev-cr9q-g3d3 | https://github.com/advisories/GHSA-22wj-vf5f-wrvj | 38.1.0 |
| 2026-04-01T16:04:11.384127+00:00 | GHSA Importer | Fixing | VCID-ahev-cr9q-g3d3 | https://github.com/advisories/GHSA-22wj-vf5f-wrvj | 38.0.0 |
| 2026-04-01T13:07:08.700990+00:00 | GithubOSV Importer | Fixing | VCID-ahev-cr9q-g3d3 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-22wj-vf5f-wrvj/GHSA-22wj-vf5f-wrvj.json | 38.0.0 |