GitHub Advisoryadvisory · Maven

GHSA-4vrv-ch96-6h42 Improper Privilege Management in MySQL Connectors Java

HIGH Published 2022-05-13 Modified 2022-06-28 Official page ↗
Aliases
CVE-2018-3258
Ecosystem
Maven
Packages
mysql:mysql-connector-java
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Reviewed
2022-06-28

Affected packages

• Maven mysql:mysql-connector-java: < 8.0.13 → fixed in 8.0.13

Description

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Related

Alias · CVE (1)

  • CVE-2018-3258 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References