Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-3586

Опубликовано: 24 апр. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.5
CVSS3: 6.4

Описание

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

5.1.45-1
cosmic

not-affected

5.1.45-2
devel

DNE

disco

DNE

eoan

DNE

esm-apps/bionic

not-affected

5.1.45-1
esm-apps/xenial

needed

esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

Показывать по

EPSS

Процентиль: 68%
0.0056
Низкий

5.5 Medium

CVSS2

6.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.4
redhat
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).

CVSS3: 6.4
nvd
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).

CVSS3: 6.4
debian
почти 9 лет назад

Vulnerability in the MySQL Connectors component of Oracle MySQL (subco ...

CVSS3: 6.4
github
больше 3 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

suse-cvrf
почти 8 лет назад

Security update for mysql-connector-java

EPSS

Процентиль: 68%
0.0056
Низкий

5.5 Medium

CVSS2

6.4 Medium

CVSS3