Lucene search
Veracode Vulnerability DatabaseVERACODE:3962HistoryApr 24, 2017 - 10:12 a.m.
Usable Expired Certificates
2017-04-2410:12:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
45.9%
mysql-connector-java doesn’t check the server’s SSL certificate for an expiration date before it establishes the SSL connection. This would allow attackers to use an expired certificate to make requests to the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mysql-connector-java | le | 5.1.41 |
References
www.debian.org/security/2017/dsa-3857
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixMySQL
www.securityfocus.com/bid/97784
www.securityfocus.com/bid/97982
www.securitytracker.com/id/1038287
forums.mysql.com/read.php?3,657049
github.com/mysql/mysql-connector-j/commit/aeba57264966b0fd329cdb8170ba772fd8fd4de2
Related
nvd
nvd
CVE-2017-3586
2017-04-24 19:59:05
cve
cve
CVE-2017-3586
2017-04-24 19:59:05
redhatcve
redhatcve
CVE-2017-3586
2017-04-21 10:18:06
ubuntucve
ubuntucve
CVE-2017-3586
2017-04-24 00:00:00
cvelist
cvelist
CVE-2017-3586
2017-04-24 19:00:00
debiancve
debiancve
CVE-2017-3586
2017-04-24 19:59:00
prion
prion
Code injection
2017-04-24 19:59:00
github
github
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
2022-05-13 01:45:42
mysql-connector-java - security update
2017-05-18 00:00:00
mysql-connector-java - security update
2017-05-16 00:00:00
openvas
openvas
Debian Security Advisory DSA 3857-1 (mysql-connector-java - security update)
2017-05-18 00:00:00
Debian: Security Advisory (DSA-3857-1)
2017-05-17 00:00:00
Debian: Security Advisory (DLA-945-1)
2018-01-24 00:00:00
debian
debian
[SECURITY] [DSA 3857-1] mysql-connector-java security update
2017-05-18 20:35:41
[SECURITY] [DLA 945-1] mysql-connector-java security update
2017-05-16 22:52:19
nessus
nessus
Debian DSA-3857-1 : mysql-connector-java - security update
2017-05-19 00:00:00
openSUSE Security Update : mysql-connector-java (openSUSE-2018-248)
2018-03-13 00:00:00
Debian DLA-945-1 : mysql-connector-java security update
2017-05-17 00:00:00
mageia
mageia
Updated mysql-connector-java packages fix security vulnerabilities
2017-10-24 08:50:58
ibm
ibm
Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ
2020-02-20 12:42:12
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00