Upstream information
Description
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).SUSE information
Overall state of this security issue: Does not affect SUSE products
National Vulnerability Database | SUSE | |
---|---|---|
Base Score | 3.5 | 2.1 |
Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N | AV:N/AC:H/Au:S/C:N/I:P/A:N |
Access Vector | Network | Network |
Access Complexity | Medium | High |
Authentication | Single | Single |
Confidentiality Impact | None | None |
Integrity Impact | Partial | Partial |
Availability Impact | None | None |
National Vulnerability Database | |
---|---|
Base Score | 3.1 |
Vector | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N |
Attack Vector | Network |
Attack Complexity | High |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | Low |
Availability Impact | None |
CVSSv3 Version | 3 |
SUSE Timeline for this CVE
CVE page created: Fri Oct 7 12:48:06 2022CVE page last modified: Wed Apr 17 17:03:00 2024