PT-2018-15647 · Mysql Server+1 · Mysql Workbench+1

Published 2018-07-18 · Updated 2019-10-03 · CVE-2018-2598

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL Workbench versions 6.3.10 and earlier

Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench, resulting in unauthorized read access to a subset of MySQL Workbench accessible data. The exploitation of this issue is considered difficult.

Recommendations For MySQL Workbench versions 6.3.10 and earlier, update to a version later than 6.3.10 to resolve the issue.

Fix

Related Identifiers

ALT-PU-2019-1298

CVE-2018-2598

Affected Products

Alt Linux

Mysql Workbench

References · 9

• https://ubuntu.com/security/CVE-2018-2598 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-2598 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2598 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-2598 · Security Note
• https://osv.dev/vulnerability/CVE-2018-2598 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20180726-0002 · Note
• http://securityfocus.com/bid/104787 · Note
• http://securitytracker.com/id/1041294 · Note