GitHub Advisoryadvisory · Maven

GHSA-jcq3-cprp-m333 Privilege escalation in mysql-connector-jav

MEDIUM Published 2020-07-01 Modified 2021-09-22 Official page ↗
Aliases
CVE-2019-2692
Ecosystem
Maven
Packages
mysql:mysql-connector-java
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-843
Reviewed
2020-07-01

Affected packages

• Maven mysql:mysql-connector-java: < 8.0.16 → fixed in 8.0.16

Description

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

Related

Alias · CVE (1)

  • CVE-2019-2692 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). vulnerability

Weakness · CWE (1)

  • CWE-843 Access of Resource Using Incompatible Type weakness

References