Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0yY2YzLWcyNDMtaGhmeM4AASTB

MySQL Connectors Privilege Escalation

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Permalink: https://github.com/advisories/GHSA-2cf3-g243-hhfx
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yY2YzLWcyNDMtaGhmeM4AASTB
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: almost 2 years ago
Updated: 14 days ago

CVSS Score: 3.3
CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Identifiers: GHSA-2cf3-g243-hhfx, CVE-2017-3590
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-3590
• http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
• http://www.securityfocus.com/bid/97840
• http://www.securitytracker.com/id/1038287
• https://github.com/advisories/GHSA-2cf3-g243-hhfx

Blast Radius: 13.8

Affected Packages