GHSA-4vrv-ch96-6h42

Source

https://github.com/advisories/GHSA-4vrv-ch96-6h42

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4vrv-ch96-6h42/GHSA-4vrv-ch96-6h42.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4vrv-ch96-6h42

Aliases

CVE-2018-3258

Published

2022-05-13T01:52:26Z

Modified

2024-02-20T05:34:07.091553Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Improper Privilege Management in MySQL Connectors Java

Details

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Database specific

{
    "nvd_published_at": "2018-10-17T01:31:00Z",
    "cwe_ids": [
        "CWE-269"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-28T23:45:33Z"
}

References

Affected packages

Maven / mysql:mysql-connector-java

Package

Name: mysql:mysql-connector-java; View open source insights on deps.dev
Purl: pkg:maven/mysql/mysql-connector-java

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.13

Affected versions

2.*

2.0.14

3.*

3.0.8

3.0.10

3.1.11

3.1.12

3.1.13

3.1.14

5.*

5.0.2

5.0.3

5.0.4

5.0.5

5.0.7

5.0.8

5.1.1

5.1.2

5.1.3

5.1.4

5.1.5

5.1.6

5.1.8

5.1.9

5.1.10

5.1.11

5.1.12

5.1.13

5.1.14

5.1.15

5.1.16

5.1.17

5.1.18

5.1.19

5.1.20

5.1.21

5.1.22

5.1.23

5.1.24

5.1.25

5.1.26

5.1.27

5.1.28

5.1.29

5.1.30

5.1.31

5.1.32

5.1.33

5.1.34

5.1.35

5.1.36

5.1.37

5.1.38

5.1.39

5.1.40

5.1.41

5.1.42

5.1.43

5.1.44

5.1.45

5.1.46

5.1.47

5.1.48

5.1.49

6.*

6.0.2

6.0.3

6.0.4

6.0.5

6.0.6

8.*

8.0.7-dmr

8.0.8-dmr

8.0.9-rc

8.0.11

8.0.12