Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. While the vulnerability is in MySQL Shell attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

🗓️ 20 Oct 2022 07:00:00Reported by MicrosoftType

Vulnerability in Oracle MySQL Shell Core Client affects 8.0.30 and earlier; allows unauthenticated read access.

Reporter	Title	Published	Views	Family All 144
FreeBSD	MySQL -- Multiple vulnerabilities	18 Oct 202200:00	–	freebsd
ATTACKERKB	CVE-2022-39402	18 Oct 202221:15	–	attackerkb
BDU FSTEC	Vulnerability of the Shell component: The Core Client for command-line and code editor, Oracle MySQL Shell, allows an attacker to gain access to read, modify, add, or delete data.	24 Oct 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-39402 affecting package mysql for versions less than 8.0.31-1	3 Nov 202220:38	–	cbl_mariner
CBLMariner	CVE-2022-39402 affecting package mysql 8.0.29-1	24 Nov 202200:46	–	cbl_mariner
Chainguard	CVE-2022-39402 vulnerabilities	18 Oct 202221:15	–	cgr
Circl	CVE-2022-39402	15 Nov 202317:01	–	circl
CNNVD	Oracle MySQL 安全漏洞	18 Oct 202200:00	–	cnnvd
CNVD	Oracle MySQL Shell Information Disclosure Vulnerability (CNVD-2023-01495)	19 Oct 202200:00	–	cnvd
CVE	CVE-2022-39402	18 Oct 202200:00	–	cve