CVE-2020-14827: Medium severity mysql vulnerability
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14827?
CVE-2020-14827 is considered a high-severity vulnerability that allows low privileged attackers to compromise systems.
How do I fix CVE-2020-14827?
To mitigate CVE-2020-14827, upgrade MySQL Server to version 5.7.32 or later for 5.7.x series and 8.0.22 or later for 8.0.x series.
What versions of MySQL are affected by CVE-2020-14827?
CVE-2020-14827 affects MySQL versions 5.7.31 and prior, and 8.0.21 and prior.
Can CVE-2020-14827 be exploited remotely?
Yes, CVE-2020-14827 can be exploited by an attacker with network access via multiple protocols.
What component of MySQL is involved in CVE-2020-14827?
CVE-2020-14827 involves the LDAP authentication component within the MySQL Server product.