PT-2025-16437 · Oracle+8 · Mysql Server+7

Publicado

2025-04-15

·

Atualizado

2025-09-30

·

CVE-2025-30703

CVSS v3.1

2.7

Baixa

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0
Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized update, insert, or delete access to some of the MySQL Server's accessible data.
Recommendations For versions 8.0.0 through 8.0.41, update to a version outside of this range to resolve the issue. For versions 8.4.0 through 8.4.4, update to a version outside of this range to resolve the issue. For versions 9.0.0 through 9.2.0, update to a version outside of this range to resolve the issue.

Correção

DoS

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
ALT-PU-2025-7012
ALT-PU-2025-7414
AZL-62074
AZL-62144
CESA-2025_16861
CVE-2025-30703
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-1454
RHSA-2025:16861
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025_16861
USN-7479-1

Produtos afetados

Alt Linux
Almalinux
Centos
Linuxmint
Mysql Server
Red Hat
Rocky Linux
Ubuntu