GitHub Advisoryadvisory · Maven

GHSA-2xxh-f8r3-hvvr Improper Access Control in MySQL Connectors Java

HIGH Published 2022-05-13 Modified 2022-07-01 Official page ↗
Aliases
CVE-2017-3523
Ecosystem
Maven
Packages
mysql:mysql-connector-java
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-284
Reviewed
2022-07-01

Affected packages

• Maven mysql:mysql-connector-java: < 5.1.41 → fixed in 5.1.41

Description

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

Related

Alias · CVE (1)

  • CVE-2017-3523 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References