PT-2017-16020 · Mysql Server · Mysql Connectors

Published 2017-04-24 · Updated 2022-05-13 · CVE-2017-3590

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 2.1.5 and earlier

Description A vulnerability in the MySQL Connectors component allows a low-privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise it. Successful attacks can result in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data.

Recommendations For versions 2.1.5 and earlier, update to a version later than 2.1.5 to resolve the issue.

Fix

Related Identifiers

CVE-2017-3590

GHSA-2CF3-G243-HHFX

Affected Products

Mysql Connectors

References · 10

• https://osv.dev/vulnerability/CVE-2017-3590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3590 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3590 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2cf3-g243-hhfx · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3590 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-3590 · Security Note
• https://github.com/mysql/mysql-connector-python · Note
• http://securityfocus.com/bid/97840 · Note
• http://securitytracker.com/id/1038287 · Note