CVE-2018-14669

2019-08-1518:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

ClickHouse MySQL client before versions 1.1.54390 had “LOAD DATA LOCAL INFILE” functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.

CPENameOperatorVersion
clickhouseeq53974
clickhouseeq1.1.54033-testing
clickhouseeq1.1.54362-testing
clickhouseeq1.1.54148-testing
clickhouseeq54009
clickhouseeq53995
clickhouseeq1.1.54376-testing
clickhouseeq1.1.54346-testing
clickhouseeq1.1.54348-testing
clickhouseeq1.1.54219-testing

Name	Operator	Version
clickhouse	eq	53974
clickhouse	eq	1.1.54033-testing
clickhouse	eq	1.1.54362-testing
clickhouse	eq	1.1.54148-testing
clickhouse	eq	54009
clickhouse	eq	53995
clickhouse	eq	1.1.54376-testing
clickhouse	eq	1.1.54346-testing
clickhouse	eq	1.1.54348-testing
clickhouse	eq	1.1.54219-testing