PT-2017-16019 · Mysql Server+1 · Mysql Connectors+1

Publicado 2017-04-24 · Atualizado 2024-06-15 · CVE-2017-3589

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.1.41 and earlier

Description The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors, resulting in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data.

Recommendations For versions 5.1.41 and earlier, update to a version later than 5.1.41 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-3589

DLA-945-1

DSA-3857-1

GHSA-CJCF-WM2P-59H5

MGASA-2017-0382

OPENSUSE-SU-2024:11071-1

SUSE-SU-2017:2591-1

Produtos afetados

Mysql Connectors

Suse

Referências · 28

• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3589 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-3589 · Aviso do Fabricante
• https://debian.org/security/2017/dsa-3857 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3589 · Aviso do Fabricante
• http://securityfocus.com/bid/97836 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11071-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3589 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2017:2591-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-cjcf-wm2p-59h5 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-3589 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0382 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3857-1 · Aviso do Fabricante
• https://computest.nl/advisories/CT-2017-0425_MySQL-Connector-J.txt · Nota
• http://securitytracker.com/id/1038287 · Nota
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante