[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2019-2814Date: (C)2019-07-24   (M)2024-01-09


Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.2 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 2.2CVSS Score : 3.5
Exploit Score: 0.7Exploit Score: 6.8
Impact Score: 1.4Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: HIGHAccess Complexity: MEDIUM
Privileges Required: HIGHAuthentication: SINGLE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: NONEAvailability: NONE
Integrity: LOW 
Availability: NONE 
  
Reference:
RHSA-2019:2484
RHSA-2019:2511
http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://support.f5.com/csp/article/K10754336
https://support.f5.com/csp/article/K10754336?utm_source=f5support&%3Butm_medium=RSS

CPE    1
cpe:/a:oracle:mysql
OVAL    5
oval:org.secpod.oval:def:504844
oval:org.secpod.oval:def:1502627
oval:org.secpod.oval:def:503315
oval:org.secpod.oval:def:2500029
...

© SecPod Technologies