Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2020-0369
HistorySep 21, 2020 - 10:45 p.m.

Updated mysql-connector-java package fixes security vulnerability

2020-09-2122:45:58
Gentoo Foundation
advisories.mageia.org
15

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.5%

JSON

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user’s connection and insert unauthorized SQL commands (CVE-2020-2934).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchmysql-connector-java< 8.0.20-1mysql-connector-java-8.0.20-1.mga7

Related

nessus 11
openvas 7
redhatcve 1
ubuntucve 1
amazon 1
cve 1
prion 1
debiancve 1
ibm 2
debian 2
suse 2
fedora 2
osv 2
freebsd 1
redhat 3
gentoo 1
oracle 2
nessus
nessus
Amazon Linux 2 : mysql-connector-java (ALAS-2023-2017)
2023-04-20 00:00:00
SUSE SLED12 / SLES12 Security Update : mysql-connector-java (SUSE-SU-2021:2877-1)
2021-08-31 00:00:00
Debian DLA-2245-1 : mysql-connector-java security update
2020-06-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0369)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2245-1)
2020-06-12 00:00:00
Debian: Security Advisory (DSA-4703-1)
2020-06-12 00:00:00
redhatcve
redhatcve
CVE-2020-2934
2020-06-25 12:54:46
ubuntucve
ubuntucve
CVE-2020-2934
2020-04-15 00:00:00
amazon
amazon
Medium: mysql-connector-java
2023-04-13 19:28:00
cve
cve
CVE-2020-2934
2020-04-15 14:15:00
prion
prion
Design/Logic Flaw
2020-04-15 14:15:00
debiancve
debiancve
CVE-2020-2934
2020-04-15 14:15:00
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Oracle products ( CVE-2020-2934, CVE-2022-21363)
2023-05-17 22:08:39
Security Bulletin: IBM API Connect's Developer Portal is impacted by vulnerabilities in MySQL.
2020-10-06 21:09:57
debian
debian
[SECURITY] [DSA 4703-1] mysql-connector-java security update
2020-06-11 17:47:17
[SECURITY] [DLA 2245-1] mysql-connector-java security update
2020-06-11 18:29:24
suse
suse
Security update for mysql-connector-java (moderate)
2021-08-05 00:00:00
Security update for mysql-connector-java (moderate)
2021-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: mysql-connector-java-8.0.21-1.fc32
2020-09-03 16:40:47
[SECURITY] Fedora 33 Update: mysql-connector-java-8.0.21-1.fc33
2020-09-25 17:06:39
osv
osv
mysql-connector-java - security update
2020-06-11 00:00:00
mysql-connector-java - security update
2020-06-11 00:00:00
freebsd
freebsd
MySQL Client -- Multiple vulerabilities
2020-04-14 00:00:00
redhat
redhat
(RHSA-2020:4960) Moderate: Red Hat Decision Manager 7.9.0 security update
2020-11-05 18:43:06
(RHSA-2020:4961) Moderate: Red Hat Process Automation Manager 7.9.0 security update
2020-11-05 18:44:42
(RHSA-2021:5134) Critical: Red Hat Fuse 7.10.0 release and security update
2021-12-14 21:27:54
gentoo
gentoo
MySQL: Multiple vulnerabilities
2021-05-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.5%

JSON
Related for MGASA-2020-0369
nessus11openvas7redhatcve1ubuntucve1amazon1cve1prion1debiancve1ibm2debian2suse2fedora2osv2freebsd1redhat3gentoo1oracle2