PT-2025-16448 · Mysql Server · Mysql Connectors

Jakub Barton · Published 2025-04-15 · Updated 2025-04-15 · CVE-2025-30714

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 9.0.0 through 9.2.0

Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Connectors, resulting in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. Successful attacks require human interaction from a person other than the attacker.

Recommendations For versions 9.0.0 through 9.2.0, update to a version that contains a fix for this issue to prevent unauthorized access to critical data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-30714

Affected Products

Mysql Connectors

References · 7

• https://cve.org/CVERecord?id=CVE-2025-30714 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30714 · Vendor Advisory
• https://oracle.com/security-alerts/cpuapr2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30714 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30714 · Vendor Advisory
• https://twitter.com/CVEnew/status/1912247293077819675 · Twitter Post