Description

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Remediation

References

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

http://www.securitytracker.com/id/1041888

http://www.securityfocus.com/bid/105589

https://security.netapp.com/advisory/ntap-20181018-0002/

https://access.redhat.com/errata/RHSA-2019:1545

Related Vulnerabilities

CVE-2019-14837 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2021-21409 Vulnerability in maven package io.netty:netty-codec-http2

CVE-2021-39167 Vulnerability in npm package @openzeppelin/contracts

CVE-2023-40810 Vulnerability in maven package org.opencrx:opencrx-core-models

CVE-2021-27290 Vulnerability in npm package ssri

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Vendor Advisory Third Party Advisory VDB Entry NVD-CWE-noinfo