CVE-2022-39402: Medium severity mysql vulnerability
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this MySQL Shell vulnerability?
The vulnerability ID of this MySQL Shell vulnerability is CVE-2022-39402.
What is the affected component of this vulnerability in MySQL Shell?
The affected component of this vulnerability in MySQL Shell is Shell: Core Client.
What versions of Oracle MySQL are affected by this vulnerability?
Versions 8.0.30 and prior of Oracle MySQL are affected by this vulnerability.
Is this MySQL Shell vulnerability easily exploitable?
Yes, this MySQL Shell vulnerability is easily exploitable.
How can an attacker exploit this MySQL Shell vulnerability?
An unauthenticated attacker with logon to the infrastructure where MySQL Shell executes can compromise MySQL Shell.
What is the severity of this MySQL Shell vulnerability?
The severity of this MySQL Shell vulnerability is medium with a CVSS score of 4.3.
Where can I find more information about this MySQL Shell vulnerability?
You can find more information about this MySQL Shell vulnerability at the following link: [Oracle Security Alerts](https://www.oracle.com/security-alerts/cpuoct2022.html).