[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-20 18:50 UTC
Importiert: 2026-10-20 20:24 UTC
Quelle-ID: full_disc
uid_hash: aac6c0f513cbfa6cd4682e5103a9f000d9a2e91058e773950f490bc7890e9707

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in Exasol

Database 7.1.30, the in-memory MPP analytical database from Exasol AG

(Germany), examined in its docker-db single-container deployment form. The SQL

engine is a proprietary C implementation named EXASolution, the server process

is exacts, clients speak a proprietary binary SQL protocol on port 8563 rather

than HTTP, TLS terminates on that port with a self-signed...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss