Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2021-34802

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.

VectorNETWORK

PublishedJul 30, 2021, 14:15

Published Bycve@mitre.org

Base Score

Score8.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.neo4j:neo4j-kernel(Maven)4.2.04.2.8N/A

References

https://neo4j.com
https://neo4j.com/developer/kb/neo4j-4-2-x-sec-vuln-fix/

Weakness Type

CWE-269

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK