CVE-2012-5613: Medium severity mariadb vulnerability
DISPUTED MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5613?
CVE-2012-5613 is considered to have a medium severity due to the potential unauthorized privilege escalation.
How do I fix CVE-2012-5613?
To fix CVE-2012-5613, ensure that the FILE privilege is only assigned to users who require it for specific tasks.
Which versions are affected by CVE-2012-5613?
CVE-2012-5613 affects MySQL 5.5.19 and MariaDB 5.5.28a among possibly other versions.
What type of vulnerability is CVE-2012-5613?
CVE-2012-5613 is a privilege escalation vulnerability that allows remote authenticated users to gain higher privileges.
Can CVE-2012-5613 be exploited remotely?
Yes, CVE-2012-5613 can be exploited remotely by authenticated users who have the FILE privilege.