Description
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2018-10-17
Score: 8.8 High
EPSS: 4.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-2453 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Github GHSA Github GHSA GHSA-4vrv-ch96-6h42 Improper Privilege Management in MySQL Connectors Java
History

Wed, 02 Oct 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Oracle Connector\/j
Redhat Jboss Fuse Satellite Satellite Capsule
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-10-02T19:29:41.211Z

Reserved: 2017-12-15T00:00:00.000Z

Link: CVE-2018-3258

cve-icon Vulnrichment

Updated: 2024-08-05T04:43:35.317Z

cve-icon NVD

Status : Modified

Published: 2018-10-17T01:31:27.230

Modified: 2024-11-21T04:05:33.033

Link: CVE-2018-3258

cve-icon Redhat

Severity : Important

Publid Date: 2018-10-17T00:00:00Z

Links: CVE-2018-3258 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses