Lucene search
+L

7 matches found

redhat
redhat
added 2026/06/30 11:22 a.m.4 views

mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check

A flaw was found in MariaDB server. A user who has been granted EXECUTE access to a stored routine through a role can view the definition of that routine. This information disclosure occurs even if the user does not possess the SHOW CREATE ROUTINE privilege, potentially exposing sensitive routine...

4.3CVSS5.7AI score0.00161EPSS
Exploits0References6
osv
osv
added 2026/06/16 11:47 a.m.8 views

BIT-MARIADB-MIN-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been...

4.3CVSS5.3AI score0.00161EPSS
Exploits0References3
osv
osv
added 2026/06/16 11:46 a.m.8 views

BIT-MARIADB-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been...

4.3CVSS5.3AI score0.00161EPSS
Exploits0References3
cve
cve
added 2026/06/12 5:31 p.m.51 views

CVE-2026-44169

CVE-2026-44169 affects MariaDB server (community forks). Issue: authorization bypass in role-based routine-level privilege check can let a user with EXECUTE on a stored routine view the routine definition without SHOW CREATE ROUTINE privilege. Affected versions: 11.4.1–11.4.10, 11.8.1–11.8.6, and...

4.3CVSS5.2AI score0.00161EPSS
Exploits0References2Affected Software1
vulnrichment
vulnrichment
added 2026/06/12 5:31 p.m.15 views

CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been...

4.3CVSS5.2AI score0.00161EPSS
Exploits0References2
cvelist
cvelist
added 2026/06/12 5:31 p.m.46 views

CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been...

4.3CVSS0.00161EPSS
Exploits0References2
redhat
redhat
added 2026/06/10 10:32 p.m.1 views

mariadb: MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check

A flaw was found in MariaDB server. A user who has been granted EXECUTE access to a stored routine through a role can view the definition of that routine. This information disclosure occurs even if the user does not possess the SHOW CREATE ROUTINE privilege, potentially exposing sensitive routine...

4.3CVSS6AI score0.00161EPSS
Exploits0References6
Rows per page
Query Builder