Lucene search

K
redhatcveRedhat.comRH:CVE-2024-21000
HistoryApr 23, 2024 - 9:05 a.m.

CVE-2024-21000

2024-04-2309:05:34
redhat.com
access.redhat.com
14
oracle mysql
server
security
privileges
flaw
vulnerability
network access

CVSS3

3.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

14.0%

A flaw was found in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.

CVSS3

3.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

AI Score

5.7

Confidence

Low

EPSS

0

Percentile

14.0%