Description
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
Remediation
References
Related Vulnerabilities
Liferay DXP Other Vulnerability (CVE-2024-25150)
ProjectSend Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-11492)
Oracle JRE CVE-2013-1571 Vulnerability (CVE-2013-1571)
PHP Numeric Errors Vulnerability (CVE-2007-1383)
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-6385)