Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mysql-libsUpgrade mysql-serverUpgrade mysql-devel-debuginfoUpgrade mysql-develUpgrade mysql-test-debuginfoUpgrade mecab-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mecab-debugsourceUpgrade mecabUpgrade mysqlUpgrade mysql-libs-debuginfoUpgrade mecab-ipadicUpgrade mysql-server-debuginfoUpgrade mysql-debugsourceUpgrade mysql-errmsgUpgrade mysql-testUpgrade mysql-debuginfo | May 5, 2023 | Oct 18, 2022 |
| Freebsd | — | Upgrade mysql-client57Upgrade mysql-connector-c++Upgrade mysql-server57Upgrade mysql-client80Upgrade mysql-connector-odbcUpgrade mysql-server80 | Nov 4, 2022 | Oct 30, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.17Upgrade to MySQL version 5.7.40 | Oct 21, 2022 | Oct 18, 2022 |
| Redhat_linux | — | Upgrade mysql-testUpgrade mysqlUpgrade mysql-devel-debuginfoUpgrade mysql-debugsourceUpgrade mecab-ipadicUpgrade mecabUpgrade mysql-errmsgUpgrade mecab-debuginfoUpgrade mysql-test-debuginfoUpgrade mecab-debugsourceUpgrade mysql-libsUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade mysql-commonUpgrade mysql-debuginfoUpgrade mysql-server-debuginfoUpgrade mysql-libs-debuginfoUpgrade mysql-server | May 5, 2023 | Oct 18, 2022 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-8.0Upgrade mysql-server-5.7 (Ubuntu Pro) | Oct 25, 2022 | Oct 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub