Vulnerability in MySQL Cluster of Oracle MySQL

CVE-2022-21486

Summary

A vulnerability exists in the MySQL Cluster product of Oracle MySQL, which permits a highly privileged attacker with access to the physical communication segment of the hardware to potentially compromise the MySQL Cluster. Exploitation of this vulnerability is complicated and necessitates human interaction from a third party. Successful exploitation could lead to unauthorized read access to certain data within the MySQL Cluster and could also enable the attacker to initiate a partial denial of service, affecting the availability of the service. Organizations utilizing affected versions must remain vigilant to mitigate risks associated with this vulnerability.

References