PT-2019-3707 · Oracle+7 · Oracle Hospitality Reporting/Analytics+7
Publicado
2019-08-09
·
Atualizado
2023-01-31
·
CVE-2019-2950
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
MySQL Server versions 8.0.16 and prior
Oracle Hospitality Reporting and Analytics (affected versions not specified)
Description
The issue is related to inadequate access control in the Server: Optimizer component of MySQL Server and the Oracle Hospitality Reporting and Analytics package. Exploitation of this issue may allow a remote attacker to cause a hang or crash of the MySQL Server using the network MySQL protocol or gain unauthorized access to protected data via the HTTP protocol.
Recommendations
For MySQL Server versions 8.0.16 and prior: update to a version that addresses the access control issue in the Server: Optimizer component.
For Oracle Hospitality Reporting and Analytics: at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Mysql Server
Oracle Hospitality Reporting/Analytics
Red Hat
Rocky Linux
Ubuntu