First published: Mon Apr 24 2017(Updated: )
An unspecified vulnerability in Oracle MySQL related to the Connectors Connector/J component could allow an authenticated attacker to cause low confidentiality impact, low integrity impact, and no availability impact.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle MySQL Connectors | <=5.1.41 | |
IBM Data Virtualization on Cloud Pak for Data | <=3.0 | |
IBM Watson Query with Cloud Pak for Data | <=2.2 | |
IBM Watson Query with Cloud Pak for Data | <=2.1 | |
IBM Watson Query with Cloud Pak for Data | <=2.0 | |
IBM Data Virtualization on Cloud Pak for Data | <=1.8 | |
IBM Data Virtualization on Cloud Pak for Data | <=1.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3586 is considered a low-severity vulnerability that could be exploited by attackers with low privileges.
To fix CVE-2017-3586, upgrade your MySQL Connectors to version 5.1.42 or later.
Users of MySQL Connectors versions 5.1.41 and earlier are affected by CVE-2017-3586.
CVE-2017-3586 can be exploited via network access using multiple protocols.
The vulnerable component in CVE-2017-3586 is the MySQL Connectors, specifically the Connector/J.