GitHub Advisoryadvisory · Maven

GHSA-2w4h-f44w-968f Improper Privilege Management in Neo4j Graph Database

HIGH Published 2022-05-24 Modified 2022-06-21 Official page ↗
Aliases
CVE-2021-34802
Ecosystem
Maven
Packages
org.neo4j:neo4j-kernel
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Reviewed
2022-06-21

Affected packages

• Maven org.neo4j:neo4j-kernel: >= 4.2.0, < 4.2.8 → fixed in 4.2.8

Description

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges.

Related

Alias · CVE (1)

  • CVE-2021-34802 A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users… vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References