漏洞标题
N/A
漏洞描述信息
Oracle MySQL的MySQLConnectors产品(组件:Connector/J)的漏洞。受影响的支持版本是8.0.32之前。难以利用的漏洞允许通过多个协议获得网络访问的高特权攻击者 compromise MySQL Connectors。成功的攻击需要非攻击者的人之间的互动。这个漏洞的成功攻击可能导致未经授权的使MySQL Connectors hang或反复崩溃(完全DOS)的能力,以及未经授权的更新、插入或删除访问某些可访问的MySQL Connectors数据,以及未经授权的读取访问某些可访问的MySQL Connectors数据。CVSS 3.1基础评分为5.3(保密性、完整性和可用性影响)。CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H)
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H).
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
漏洞类别
N/A
漏洞标题
Oracle MySQL 安全漏洞
漏洞描述信息
Oracle MySQL是美国甲骨文(Oracle)公司的一套开源的关系数据库管理系统。 Oracle MySQL 的 MySQL Connectors 8.0.32之前版本存在安全漏洞。攻击者利用该漏洞导致MySQL Connectors挂起或频繁重复崩溃,以及获得对MySQL数据的更新、插入或删除权限。
CVSS信息
N/A
漏洞类别
其他