CVE-2018-2598: Medium severity mysql workbench vulnerability

Q: What is the vulnerability ID for this MySQL Workbench vulnerability?

The vulnerability ID for this MySQL Workbench vulnerability is CVE-2018-2598.

Q: What is the severity of CVE-2018-2598?

The severity of CVE-2018-2598 is medium, with a severity value of 3.7.

Q: Which component of Oracle MySQL is affected by CVE-2018-2598?

The MySQL Workbench component of Oracle MySQL is affected by CVE-2018-2598.

Q: What versions of MySQL Workbench are affected by CVE-2018-2598?

Versions 6.3.10 and earlier of MySQL Workbench are affected by CVE-2018-2598.

Q: How can an attacker exploit CVE-2018-2598?

An unauthenticated attacker with network access via multiple protocols can exploit CVE-2018-2598 to compromise MySQL Workbench.

Published Jul 18, 2018

Updated

Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle MySQL Workbench<=6.3.10

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Event History

Jul 18, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this MySQL Workbench vulnerability?

The vulnerability ID for this MySQL Workbench vulnerability is CVE-2018-2598.

What is the severity of CVE-2018-2598?