PT-2017-16020 · Mysql Server · Mysql Connectors

Publicado 2017-04-24 · Atualizado 2022-05-13 · CVE-2017-3590

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 2.1.5 and earlier

Description A vulnerability in the MySQL Connectors component allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise it. Successful attacks can result in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data.

Recommendations For versions 2.1.5 and earlier, update to a version later than 2.1.5 to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-3590

GHSA-2CF3-G243-HHFX

Produtos afetados

Mysql Connectors

Referências · 10

• https://github.com/mysql/mysql-connector-python · Nota
• https://osv.dev/vulnerability/CVE-2017-3590 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-3590 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3590 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-2cf3-g243-hhfx · Aviso do Fabricante
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Aviso do Fabricante
• http://securityfocus.com/bid/97840 · Nota
• https://cve.org/CVERecord?id=CVE-2017-3590 · Nota de Segurança
• http://securitytracker.com/id/1038287 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3590 · Nota de Segurança