Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

🗓️ 29 Apr 2022 07:00:00Reported by MicrosoftType

Vulnerability in Oracle MySQL Cluster allows takeover on affected versions; requires physical access and user interaction.

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	8 Nov 202216:20	–	ibm
FreeBSD	MySQL -- Multiple vulnerabilities	16 Apr 202200:00	–	freebsd
ATTACKERKB	CVE-2022-21489	19 Apr 202221:15	–	attackerkb
BDU FSTEC	Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.	6 May 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-21489 affecting package mysql for versions less than 8.0.29-1	1 Jul 202221:02	–	cbl_mariner
CBLMariner	CVE-2022-21489 affecting package mysql 8.0.28-1	12 May 202202:17	–	cbl_mariner
CNNVD	Oracle MySQL 输入验证错误漏洞	19 Apr 202200:00	–	cnnvd
CNVD	Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-31848)	20 Apr 202200:00	–	cnvd
CVE	CVE-2022-21489	19 Apr 202220:38	–	cve
Cvelist	CVE-2022-21489	19 Apr 202220:38	–	cvelist