Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 5.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Vulnerabilidad en el componente MySQL Server en Oracle MySQL (subcomponente: Client programs). Las versiones compatibles que se han visto afectadas son la 5.5.56 y anteriores, y la 5.6.36 y anteriores. Esta vulnerabilidad fácilmente explotable permite que un atacante con un bajo nivel de privilegios y con permisos de inicio de sesión en la infraestructura en la que se ejecuta MySQL Server comprometa la seguridad de MySQL Server. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualización, inserción o supresión de algunos de los datos accesibles de MySQL Server, así como el acceso de lectura sin autorización de un subconjunto de datos accesibles de MySQL Server. Además, esto puede dar lugar a que el atacante consiga provocar una denegación de servicio parcial (DoS parcial) de MySQL Server. CVSS 3.0 Base Score 5.3 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | LOW |
| Availability Impact | LOW |
AV:L/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | LOCAL |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| oracle | mysql | * | <built-in method update of dict object at 0x7e60b9fb6c00> | Application |
| oracle | mysql | * | <built-in method update of dict object at 0x7e60a8a636c0> | Application |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x7e60a8a63640> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7e60bb887180> | Operating System |
| redhat | openstack | 12 | <built-in method update of dict object at 0x7e60b9fb6640> | Application |
| redhat | enterprise_linux_desktop | 7.0 | <built-in method update of dict object at 0x7e60b9fb6540> | Operating System |
| redhat | enterprise_linux_server | 7.0 | <built-in method update of dict object at 0x7e60b9fb68c0> | Operating System |
| redhat | enterprise_linux_server_aus | 7.6 | <built-in method update of dict object at 0x7e60b9fb4780> | Operating System |
| redhat | enterprise_linux_server_eus | 7.5 | <built-in method update of dict object at 0x7e60b9fb5340> | Operating System |
| redhat | enterprise_linux_server_eus | 7.6 | <built-in method update of dict object at 0x7e60b9fb4e80> | Operating System |
| redhat | enterprise_linux_server_tus | 7.6 | <built-in method update of dict object at 0x7e611232c300> | Operating System |
| redhat | enterprise_linux_workstation | 7.0 | <built-in method update of dict object at 0x7e60b9fb4900> | Operating System |
| mariadb | mariadb | * | <built-in method update of dict object at 0x7e60a888d8c0> | Application |
| mariadb | mariadb | * | <built-in method update of dict object at 0x7e60eb26c580> | Application |
| mariadb | mariadb | * | <built-in method update of dict object at 0x7e6107469480> | Application |
| mariadb | mariadb | * | <built-in method update of dict object at 0x7e6112392b40> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* |