Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-3589

Опубликовано: 19 апр. 2017
Источник: redhat
CVSS3: 3.3

Описание

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Отчет

This issue affects the versions of mysql-connector-java as shipped with Red Hat Enterprise Linux 6 and 7.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6mysql-connector-javaWill not fix
Red Hat Enterprise Linux 7mysql-connector-javaWill not fix
Red Hat JBoss Fuse Service Works 6mysql-connector-javaWill not fix
Red Hat JBoss Portal 6mysql-connector-javaWill not fix
Red Hat Mobile Application Platform 4mysql-connector-javaAffected
Red Hat OpenShift Enterprise 2mysql-connector-javaAffected
Red Hat Single Sign-On 7mysql-connector-javaNot affected

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1444407mysql-connector-java: Connector/J unspecified vulnerability (CPU Apr 2017)

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
ubuntu
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

CVSS3: 3.3
nvd
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

CVSS3: 3.3
debian
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subco ...

CVSS3: 3.3
github
больше 3 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

suse-cvrf
почти 8 лет назад

Security update for mysql-connector-java

3.3 Low

CVSS3