Lucene search

K
cve[email protected]CVE-2006-0369
HistoryJan 22, 2006 - 8:03 p.m.

CVE-2006-0369

2006-01-2220:03:00
CWE-200
web.nvd.nist.gov
24
cve-2006-0369
mysql
information disclosure
security vulnerability
view
nvd

6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

25.7%

MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the “SELECT * FROM information_schema.views;” query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access

CPENameOperatorVersion
oracle:mysqloracle mysqleq5.0.18

6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

25.7%

Related for CVE-2006-0369