Lucene search

[email protected]CVE-2019-2435

HistoryJan 16, 2019 - 7:30 p.m.

CVE-2019-2435

2019-01-1619:30:32

[email protected]

web.nvd.nist.gov

142

cve-2019-2435

oracle mysql

connector

python

vulnerability

mysql connectors

exploitable

network access

tls

cvss 3.0

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).

Affected configurations

Vulners

NVD

Node

oraclemysql_connectorsRange8.0.0–8.0.13

oraclemysql_connectorsRange2.0.0–2.1.8

VendorProductVersionCPE
oraclemysql_connectors*cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*
oraclemysql_connectors*cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	mysql_connectors	*	cpe:2.3:a:oracle:mysql_connectors::::::::
oracle	mysql_connectors	*	cpe:2.3:a:oracle:mysql_connectors::::::::

CNA Affected

[
  {
    "product": "MySQL Connectors",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.13 and prior"
      },
      {
        "status": "affected",
        "version": "2.1.8 and prior"
      }
    ]
  }
]