CVE-2018-15768: Insecure MySQL Configuration Vulnerability
Published Nov 30, 2018
·Updated
Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.
Affected Software
1 affected component
Dell OpenManage Network Manager<6.5.0
Event History
Nov 30, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-15768?
CVE-2018-15768 is considered to be of medium severity due to the risk of unauthorized read/write access to the file system.
2
How do I fix CVE-2018-15768?
To fix CVE-2018-15768, upgrade Dell OpenManage Network Manager to version 6.5.0 or later.
3
What causes CVE-2018-15768?
CVE-2018-15768 is caused by insecure default configurations allowing unnecessary permissions for MySQL users.
4
Which versions of Dell OpenManage Network Manager are affected by CVE-2018-15768?
All versions of Dell OpenManage Network Manager prior to 6.5.0 are affected by CVE-2018-15768.
5
What impact does CVE-2018-15768 have on MySQL users?
CVE-2018-15768 allows MySQL users to gain unauthorized read/write access to the file system, potentially leading to data breaches.