GitHub Advisoryadvisory · Maven

GHSA-cjcf-wm2p-59h5 Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

LOW Published 2022-05-13 Modified 2022-07-01 Official page ↗
Aliases
CVE-2017-3589
Ecosystem
Maven
Packages
mysql:mysql-connector-java
Severity
Low
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-200
Reviewed
2022-07-01

Affected packages

• Maven mysql:mysql-connector-java: < 5.1.42 → fixed in 5.1.42

Description

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Related

Alias · CVE (1)

  • CVE-2017-3589 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References