PT-2017-16019 · Mysql Server+1 · Mysql Connectors+1

Published 2017-04-24 · Updated 2024-06-15 · CVE-2017-3589

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 5.1.41 and earlier

Description The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors, resulting in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data.

Recommendations For versions 5.1.41 and earlier, update to a version later than 5.1.41 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-3589

DLA-945-1

DSA-3857-1

GHSA-CJCF-WM2P-59H5

MGASA-2017-0382

OPENSUSE-SU-2024:11071-1

SUSE-SU-2017:2591-1

Affected Products

Mysql Connectors

Suse

References · 28

• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3589 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3589 · Vendor Advisory
• https://debian.org/security/2017/dsa-3857 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3589 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11071-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3589 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:2591-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cjcf-wm2p-59h5 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0382 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3857-1 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• http://debian.org/security/2017/dsa-3857 · Vendor Advisory
• https://debian.org/security/2017/dsa-3840 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3589 · Security Note
• https://advisories.mageia.org/MGASA-2017-0382.html · Security Note