Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Advisories
Source ID Title
EUVD EUVD EUVD-2020-6833 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Ubuntu USN Ubuntu USN USN-4441-1 MySQL vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 26 Sep 2024 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-09-26T20:40:58.086Z

Reserved: 2020-06-19T00:00:00

Link: CVE-2020-14697

cve-icon Vulnrichment

Updated: 2024-08-04T12:53:43.213Z

cve-icon NVD

Status : Modified

Published: 2020-07-15T18:15:33.973

Modified: 2024-11-21T05:03:54.840

Link: CVE-2020-14697

cve-icon Redhat

Severity : Important

Publid Date: 2020-07-14T00:00:00Z

Links: CVE-2020-14697 - Bugzilla

cve-icon OpenCVE Enrichment

No data.