CVE-2024-21101: Low severity mysql vulnerability
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21101?
CVE-2024-21101 is classified as a difficult-to-exploit vulnerability, primarily affecting high-privileged attackers with network access.
How do I fix CVE-2024-21101?
To remediate CVE-2024-21101, upgrade to the latest versions of MySQL Cluster beyond 7.5.33, 7.6.29, 8.0.36, and 8.3.0.
Which versions of MySQL are affected by CVE-2024-21101?
CVE-2024-21101 affects MySQL Cluster versions 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior, and 8.3.0 and prior.
What components of MySQL does CVE-2024-21101 affect?
CVE-2024-21101 specifically affects the Cluster product component of Oracle MySQL.
Can CVE-2024-21101 be exploited remotely?
CVE-2024-21101 requires network access for exploitation, making it a remote vulnerability.