Lucene search
Veracode Vulnerability DatabaseVERACODE:7861HistoryNov 21, 2018 - 1:26 a.m.
Authorization Bypass
2018-11-2101:26:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.002 Low
EPSS
Percentile
62.1%
mysql-connector-java is vulnerable to authorization bypass. A low privileged remote attacker with network access via multiple protocols is able to exploit and compromise MySQL connectors leading to a complete takeover of the subcomponent.
References
www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
www.securityfocus.com/bid/105589
www.securitytracker.com/id/1041888
access.redhat.com/errata/RHSA-2019:1545
github.com/mysql/mysql-connector-j/commit/8b59b9ebab61cc97bafe77ee05f79829b1376e47
security.netapp.com/advisory/ntap-20181018-0002/
www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
Related
fedora
fedora
[SECURITY] Fedora 29 Update: mysql-connector-java-8.0.13-1.fc29
2018-11-10 03:21:23
[SECURITY] Fedora 28 Update: mysql-connector-java-8.0.13-1.fc28
2018-11-10 03:30:42
redhatcve
redhatcve
CVE-2018-3258
2019-10-09 11:57:57
prion
prion
Code injection
2018-10-17 01:31:00
debiancve
debiancve
CVE-2018-3258
2018-10-17 01:31:00
github
github
Improper Privilege Management in MySQL Connectors Java
2022-05-13 01:52:26
cvelist
cvelist
CVE-2018-3258
2018-10-17 01:00:00
openvas
openvas
Fedora Update for mysql-connector-java FEDORA-2018-7a5bcb4dbe
2018-11-12 00:00:00
Fedora Update for mysql-connector-java FEDORA-2018-6b350bb946
2019-05-07 00:00:00
nessus
nessus
Fedora 28 : 1:mysql-connector-java (2018-7a5bcb4dbe)
2019-01-03 00:00:00
Fedora 29 : 1:mysql-connector-java (2018-6b350bb946)
2019-01-03 00:00:00
RHEL 7 : mysql-connector-java (Unpatched Vulnerability)
2024-06-03 00:00:00
nvd
nvd
CVE-2018-3258
2018-10-17 01:31:27
cve
cve
CVE-2018-3258
2018-10-17 01:31:27
ubuntucve
ubuntucve
CVE-2018-3258
2018-10-17 00:00:00
osv
osv
Improper Privilege Management in MySQL Connectors Java
2022-05-13 01:52:26
f5
f5
redhat
redhat
(RHSA-2019:1545) Important: Red Hat Fuse 7.3.1 security update
2019-06-18 19:49:16
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25
ibm
ibm
oracle
oracle
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00