Vulnerability in MySQL Connectors Could Lead to Takeover

CVE-2024-21272

What is CVE-2024-21272?

A vulnerability exists in the MySQL Connectors product of Oracle MySQL, specifically affecting Connector/Python. All supported versions up to and including 9.0.0 are susceptible. The vulnerability poses a risk as it allows a low-privileged attacker with network access to exploit the MySQL Connectors through multiple protocols. Successful exploitation can lead to a compromise of the MySQL Connectors, potentially enabling an unauthorized takeover. This issue highlights the importance of maintaining robust security practices for configurations and access controls within MySQL environments.

References