Lucene search

K
osvGoogleOSV:GHSA-2CF3-G243-HHFX
HistoryMay 13, 2022 - 1:45 a.m.

MySQL Connectors Privilege Escalation

2022-05-1301:45:43
Google
osv.dev
7
mysql
connectors
privilege escalation
oracle
vulnerability
python
infrastructure
exploitable
low privileged
cvss
integrity
access control

AI Score

2.5

Confidence

High

EPSS

0.001

Percentile

20.4%

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 2.1.5 and earlier. Easily “exploitable” vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

AI Score

2.5

Confidence

High

EPSS

0.001

Percentile

20.4%