PT-2019-4250 · Mysql Server · Mysql-Gui-Tools

Martin Drescher · Publicado 2019-11-12 · Atualizado 2019-11-15 · CVE-2010-4177

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions mysql-gui-tools (mysql-query-browser and mysql-admin) versions prior to 5.0r14+openSUSE-2.3

Description The issue is related to the storage of credentials in unencrypted form. This allows an attacker to gain unauthorized access to protected information through the list of running processes.

Recommendations For versions prior to 5.0r14+openSUSE-2.3, update to version 5.0r14+openSUSE-2.3 or later to resolve the issue.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

BDU:2019-04851

CVE-2010-4177

Produtos afetados

Mysql-Gui-Tools

Referências · 9

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605542 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4177 · Nota de Segurança
• https://openwall.com/lists/oss-security/2010/11/16/6 · Nota
• http://securityfocus.com/bid/97959 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4177 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4177 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2010-4177 · Nota
• https://securityfocus.com/bid/97959 · Nota
• https://bdu.fstec.ru/vul/2019-04851 · Nota de Segurança