Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-39593

Опубликовано: 17 окт. 2024
Источник: debian
EPSS Низкий

Описание

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Примечания

  • Dubious mysql/mariadb issue, reached out to upstream

EPSS

Процентиль: 57%
0.00352
Низкий

Связанные уязвимости

CVSS3: 5.6
ubuntu
8 месяцев назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.5
redhat
8 месяцев назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.6
nvd
8 месяцев назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.6
redos
3 месяца назад

Уязвимость mariadb

CVSS3: 5.6
github
8 месяцев назад

Insecure permissions in the sys_exec function of Oracle MYSQL MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges.

EPSS

Процентиль: 57%
0.00352
Низкий