Описание
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.x only |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [3.x only]] |
| precise | DNE | |
| trusty | not-affected | 3.x only |
| trusty/esm | DNE | trusty was not-affected [3.x only] |
| upstream | released | 3.6.1-1 |
| vivid | not-affected | 3.x only |
Показывать по
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass ...
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.
7.5 High
CVSS2
9.8 Critical
CVSS3