BIT-2020-2922

2023-11-0607:32:22

Google

osv.dev

oracle mysql c api

vulnerability

unauthorized access

4.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.5%

JSON

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CPENameOperatorVersion
mysql-clientge5.5.0
mysql-clientlt5.5.65
mysql-clientge10.1.0
mysql-clientlt10.1.41
mysql-clientge10.2.0
mysql-clientlt10.2.26
mysql-clientge10.3.0
mysql-clientlt10.3.17
mysql-clientge10.4.0
mysql-clientlt10.4.7

Name	Operator	Version
mysql-client	ge	5.5.0
mysql-client	lt	5.5.65
mysql-client	ge	10.1.0
mysql-client	lt	10.1.41
mysql-client	ge	10.2.0
mysql-client	lt	10.2.26
mysql-client	ge	10.3.0
mysql-client	lt	10.3.17
mysql-client	ge	10.4.0
mysql-client	lt	10.4.7