First published: Thu Jan 27 2022(Updated: )
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Reference: <a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a>
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle MySQL Connectors | <8.0.27 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-2047343 is classified as a high risk due to its potential for exploitation by high privileged attackers with network access.
To fix REDHAT-BUG-2047343, upgrade to a version of Oracle MySQL Connectors that is higher than 8.0.27.
REDHAT-BUG-2047343 affects users of Oracle MySQL Connectors version 8.0.27 and prior.
REDHAT-BUG-2047343 allows high privileged attackers to compromise MySQL Connectors through multiple network protocols.
The vulnerability in REDHAT-BUG-2047343 is difficult to exploit, but it poses significant risks if successfully attacked.