PT-2019-3726 · Mysql Server+2 · Mysql Connectors+2

Publicado

2019-10-15

·

Atualizado

2023-02-04

·

CVE-2019-2920

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.3.13 and prior MySQL Connectors versions 8.0.17 and prior
Description The issue is related to improper authorization in the Connector/ODBC component of the MySQL Connectors product. It allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, resulting in a partial denial of service.
Recommendations For versions 5.3.13 and prior, update to a version later than 5.3.13 to resolve the issue. For versions 8.0.17 and prior, update to a version later than 8.0.17 to resolve the issue.

Correção

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

ALT-PU-2019-3247
ALT-PU-2020-1827
BDU:2019-03953
CVE-2019-2920
USN-4195-1

Produtos afetados

Alt Linux
Mysql Connectors
Ubuntu