Veracode Vulnerability DatabaseVERACODE:26436Information Disclosure
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
mysql is vulnerable to information disclosure. The vulnerability exists in server information schema through multiple unspecified vulnerabilities.
References
access.redhat.com/errata/RHSA-2020:3518
access.redhat.com/security/updates/classification/#important
lists.fedoraproject.org/archives/list/[email protected]/message/CAI7GRYZ5265JVKHC6VXI57MNJDDB63C/
lists.fedoraproject.org/archives/list/[email protected]/message/HYQPCHGCVKFS3H226QQKZFQP56JYOQ3T/
lists.fedoraproject.org/archives/list/[email protected]/message/SA2XMR2ZY2BPR3VLTDVLNV74JL7TA7KL/
security.gentoo.org/glsa/202105-27
security.netapp.com/advisory/ntap-20200717-0004/
usn.ubuntu.com/4441-1/
www.oracle.com/security-alerts/cpujul2020.html
Related
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N