Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-39593

Опубликовано: 17 окт. 2024
Источник: debian

Описание

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Примечания

  • Dubious mysql/mariadb issue, reached out to upstream

Связанные уязвимости

CVSS3: 5.6
ubuntu
около 1 года назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.5
redhat
около 1 года назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.6
nvd
около 1 года назад

Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

CVSS3: 5.6
github
около 1 года назад

Insecure permissions in the sys_exec function of Oracle MYSQL MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges.

CVSS3: 5.6
fstec
больше 2 лет назад

Уязвимость функции sys_exec() системы управления базами данных MariaDB, позволяющая нарушителю выполнять произвольные команды с повышенными привилегиями