Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-01495
HistoryOct 19, 2022 - 12:00 a.m.

Oracle MySQL Shell Information Disclosure Vulnerability (CNVD-2023-01495)

2022-10-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Oracle MySQL Server is a relational database from Oracle Corporation (USA). An information disclosure vulnerability exists in the Shell: Core Client component of Oracle MySQL. An attacker can exploit the vulnerability to compromise MySQL Shell and gain unauthorized access to a subset of MySQL Shell-accessible data.

CPENameOperatorVersion
oracle mysql >=8.0,le8.0.30

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N