MySQL Connectors Vulnerability in Oracle MySQL
CVE-2022-21363

6.6MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
19 January 2022

What is CVE-2022-21363?

A vulnerability exists in the MySQL Connectors of Oracle MySQL, specifically affecting versions 8.0.27 and earlier. This flaw can be exploited by an attacker with high privileges and network access, allowing them to leverage multiple protocols to compromise the MySQL Connectors. When successfully exploited, this can lead to unauthorized access and control over the MySQL Connectors, potentially impacting confidentiality, integrity, and availability of the affected systems.

Affected Version(s)

MySQL Connectors 8.0.27 and prior

References

https://www.oracle.com/security-alerts/cpujan2022.html
x_refsource_MISC

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.