Authorization Bypass

2019-01-1508:57:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

JSON

mysql55-mysql is vulnerable to authorization bypass attacks. The vulnerability exists through an unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CPENameOperatorVersion
mysql55-mysqleq5.5.32__3.el5
mysqleq5.1.69__1.el6_4
mysqleq5.1.61__4.el6
mysqleq5.1.52__1.el6_0.1
mysqleq5.1.66__2.el6_3
mysqleq5.1.47__4.el6
mysqleq5.1.66__1.el6_3
mysqleq5.1.61__1.el6_2.1
mysqleq5.1.67__1.el6_3
mysql55-mysqleq5.5.32__3.el5

Name	Operator	Version
mysql55-mysql	eq	5.5.32__3.el5
mysql	eq	5.1.69__1.el6_4
mysql	eq	5.1.61__4.el6
mysql	eq	5.1.52__1.el6_0.1
mysql	eq	5.1.66__2.el6_3
mysql	eq	5.1.47__4.el6
mysql	eq	5.1.66__1.el6_3
mysql	eq	5.1.61__1.el6_2.1
mysql	eq	5.1.67__1.el6_3
mysql55-mysql	eq	5.5.32__3.el5