REDHAT-BUG-2047343: Medium severity Oracle MySQL Connectors vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Reference: https://www.oracle.com/security-alerts/cpujan2022.html
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL Connector/J (MySQL Connectors)to a version that resolves this vulnerability.Fixed in 8.0.27 and prior
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2047343?
The severity of REDHAT-BUG-2047343 is classified as a high risk due to its potential for exploitation by high privileged attackers with network access.
How do I fix REDHAT-BUG-2047343?
To fix REDHAT-BUG-2047343, upgrade to a version of Oracle MySQL Connectors that is higher than 8.0.27.
Who is affected by REDHAT-BUG-2047343?
REDHAT-BUG-2047343 affects users of Oracle MySQL Connectors version 8.0.27 and prior.
What type of attacks does REDHAT-BUG-2047343 allow?
REDHAT-BUG-2047343 allows high privileged attackers to compromise MySQL Connectors through multiple network protocols.
Is the vulnerability in REDHAT-BUG-2047343 easy to exploit?
The vulnerability in REDHAT-BUG-2047343 is difficult to exploit, but it poses significant risks if successfully attacked.