Privilege Elevation Vulnerability in MySQL and MariaDB Products
CVE-2012-5613
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 88%
What is CVE-2012-5613?
A configuration flaw in MySQL and MariaDB can enable remote authenticated users to gain elevated privileges by exploiting the FILE privilege meant for administrators. This issue arises when the FILE privilege is incorrectly assigned to users lacking administrative rights. While the vendor argues that adherence to installation documentation mitigates this risk, the potential for exploitation remains a significant concern for database security.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.