[Git][security-tracker-team/security-tracker][master] Mark CVE-2022-45868/h2database as unimportant

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d58d408c by Salvatore Bonaccorso at 2022-11-24T16:16:48+01:00
Mark CVE-2022-45868/h2database as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14,8 +14,9 @@ CVE-2022-45870
 CVE-2022-45869
 	RESERVED
 CVE-2022-45868 (The web-based admin console in H2 Database Engine through 2.1.214 can  ...)
-	- h2database <unfixed>
-	TODO: check, check upstream status
+	- h2database <unfixed> (unimportant)
+	NOTE: Not cosidered a vulnerability of H2 Console by vendor. Passwords should never be
+	NOTE: passed on the command line.
 CVE-2022-45867
 	RESERVED
 CVE-2022-45866 (qpress before PierreLvx/qpress 20220819 and before version 11.3, as us ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d58d408ca9145320cf100d591d543b6a45056bd7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d58d408ca9145320cf100d591d543b6a45056bd7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221124/210d9356/attachment.htm>