Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Advisories
Source ID Title
EUVD EUVD EUVD-2022-2453 Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Github GHSA Github GHSA GHSA-4vrv-ch96-6h42 Improper Privilege Management in MySQL Connectors Java
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 02 Oct 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-10-02T19:29:41.211Z

Reserved: 2017-12-15T00:00:00

Link: CVE-2018-3258

cve-icon Vulnrichment

Updated: 2024-08-05T04:43:35.317Z

cve-icon NVD

Status : Modified

Published: 2018-10-17T01:31:27.230

Modified: 2024-11-21T04:05:33.033

Link: CVE-2018-3258

cve-icon Redhat

Severity : Important

Publid Date: 2018-10-17T00:00:00Z

Links: CVE-2018-3258 - Bugzilla

cve-icon OpenCVE Enrichment

No data.