China National Vulnerability DatabaseCNVD-2023-01496Oracle MySQL Shell Information Disclosure Vulnerability
3.9 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Oracle MySQL Server is a relational database from Oracle Corporation (USA). An information disclosure vulnerability exists in the Shell: Core Client component of Oracle MySQL Shell. An attacker could exploit the vulnerability to compromise MySQL Shell and gain unauthorized access to a subset of MySQL Shell-accessible data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle mysql >=8.0， | le | 8.0.30 |
Related
3.9 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N