Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/04/11 10:53 p.m.•39 views

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

5CVSS7.2AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 10:21 p.m.•14 views

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

5CVSS7.2AI score0.00165EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/04/09 10:21 p.m.•62 views

CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig`

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

5CVSS0.00165EPSS
SaveExploits0References5
CVE
CVE
•added 2025/04/09 10:21 p.m.•162 views

CVE-2025-24375

The CVE-2025-24375 entry concerns the Charmed MySQL K8s operator (and machine operator) with credential leakage risk. Root cause: the operator calls the mysql-shell/DDL scripts by writing a temporary script file containing full URIs with user credentials, created with read permissions (0644); unp...

5CVSS5.2AI score0.00165EPSS
SaveExploits0References5
Mend
Mend
•added 2025/04/09 10:21 p.m.•9 views

CVE-2025-24375

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

5.1CVSS0.00165EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•11 views

CVE-2025-24375: Plaintext Storage of a Password

Charmed MySQL K8s operator is a Charmed Operator for running MySQL on Kubernetes. Before revision 221, the method for calling a SQL DDL or python based mysql-shell scripts can leak database users credentials. The method mysql-operator calls mysql-shell application rely on writing to a temporary...

5CVSS5.6AI score0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder