PRIOn knowledge basePRION:CVE-2021-2032

HistoryJan 20, 2021 - 3:15 p.m.

Code injection

2021-01-2015:15:00

PRIOn knowledge base

www.prio-n.com

3.5 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

CPENameOperatorVersion
mariadbge10.0.0
mariadblt10.0.11
mysqlge8.0.0
mysqlle8.0.22
mysqlge5.7.0
mysqlle5.7.32

Name	Operator	Version
mariadb	ge	10.0.0
mariadb	lt	10.0.11
mysql	ge	8.0.0
mysql	le	8.0.22
mysql	ge	5.7.0
mysql	le	5.7.32

References

security.gentoo.org/glsa/202105-27

security.netapp.com/advisory/ntap-20210219-0003/

www.oracle.com/security-alerts/cpujan2021.html