vulnerability

Red Hat: CVE-2022-21457: CVE-2022-21457 mysql: Server: PAM Auth Plugin unspecified vulnerability (CPU Apr 2022) (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Apr 19, 2022
Added
Oct 20, 2022
Modified
Aug 7, 2025

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

Solutions

redhat-upgrade-mecabredhat-upgrade-mecab-debuginforedhat-upgrade-mecab-debugsourceredhat-upgrade-mecab-ipadicredhat-upgrade-mecab-ipadic-eucjpredhat-upgrade-mysqlredhat-upgrade-mysql-commonredhat-upgrade-mysql-debuginforedhat-upgrade-mysql-debugsourceredhat-upgrade-mysql-develredhat-upgrade-mysql-devel-debuginforedhat-upgrade-mysql-errmsgredhat-upgrade-mysql-libsredhat-upgrade-mysql-libs-debuginforedhat-upgrade-mysql-serverredhat-upgrade-mysql-server-debuginforedhat-upgrade-mysql-testredhat-upgrade-mysql-test-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.