Vulnerability in MySQL Enterprise Monitor from Oracle MySQL

CVE-2017-3306

Summary

A vulnerability exists in the MySQL Enterprise Monitor component of Oracle MySQL that can be exploited by a high-privileged attacker with network access using various protocols. The attacker requires human interaction from a third party to successfully execute the attack. While this vulnerability primarily affects MySQL Enterprise Monitor, it can also lead to significant impacts on other connected products. Exploitation may allow unauthorized creation, deletion, or modification of data, including critical MySQL Enterprise Monitor accessible data, and even a partial denial of service. This emphasizes the need for vigilant security measures to safeguard sensitive information.

References