Vulnerability in MySQL Cluster of Oracle MySQL
CVE-2022-21486

2.9LOW

Key Information:

Vendor

Oracle

Vendor
CVE Published:
19 April 2022

What is CVE-2022-21486?

A vulnerability exists in the MySQL Cluster product of Oracle MySQL, which permits a highly privileged attacker with access to the physical communication segment of the hardware to potentially compromise the MySQL Cluster. Exploitation of this vulnerability is complicated and necessitates human interaction from a third party. Successful exploitation could lead to unauthorized read access to certain data within the MySQL Cluster and could also enable the attacker to initiate a partial denial of service, affecting the availability of the service. Organizations utilizing affected versions must remain vigilant to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

MySQL Cluster 7.4.35 and prior

MySQL Cluster 7.5.25 and prior

MySQL Cluster 7.6.21 and prior

References

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.