Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mysql-serverUpgrade mecab-ipadic-EUCJPUpgrade mysql-develUpgrade mysql-libsUpgrade mysql-commonUpgrade mysql-testUpgrade mecabUpgrade mecab-ipadicUpgrade mysqlUpgrade mysql-errmsg | Oct 20, 2022 | Apr 19, 2022 |
| Centos_linux | — | Upgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mecabUpgrade mecab-ipadic-EUCJPUpgrade mysql-debugsourceUpgrade mysql-develUpgrade mysql-devel-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-debuginfoUpgrade mecab-debugsourceUpgrade mysql-errmsgUpgrade mysql-commonUpgrade mysql-serverUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mysqlUpgrade mysql-testUpgrade mysql-libs | Oct 20, 2022 | Apr 19, 2022 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql57-serverUpgrade mysql80-client | Nov 4, 2022 | Apr 16, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30 | Jun 15, 2026 | Apr 19, 2022 |
| Oracle_linux | — | Upgrade mysqlUpgrade mysql-errmsgUpgrade mecabUpgrade mysql-develUpgrade mecab-ipadicUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-test | Sep 22, 2022 | Apr 19, 2022 |
| Redhat_linux | — | Upgrade mysql-test-debuginfoUpgrade mysql-debugsourceUpgrade mysql-serverUpgrade mysql-libsUpgrade mecab-debuginfoUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-server-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecab-ipadicUpgrade mecab-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql-debuginfoUpgrade mysqlUpgrade mecab | Oct 20, 2022 | Apr 19, 2022 |
| Rocky_linux | — | Upgrade mysql-errmsgUpgrade mecabUpgrade mysql-testUpgrade mysqlUpgrade mysql-server-debuginfoUpgrade mecab-debugsourceUpgrade mysql-libs-debuginfoUpgrade mysql-devel-debuginfoUpgrade mecab-ipadicUpgrade mysql-debugsourceUpgrade mecab-ipadic-EUCJPUpgrade mysql-libsUpgrade mysql-debuginfoUpgrade mysql-develUpgrade mecab-debuginfoUpgrade mysql-commonUpgrade mysql-serverUpgrade mysql-test-debuginfo | Mar 12, 2024 | Apr 19, 2022 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-8.0 | May 4, 2022 | Apr 19, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub