Wind River Support Network

HomeDefectsLIN1021-4583
Fixed

LIN1021-4583 : Security Advisory - mariadb - CVE-2022-39402

Created: Oct 18, 2022    Updated: Oct 25, 2022
Resolved Date: Oct 25, 2022
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

CREATE(Triage):(User=admin) CVE-2022-39402 (https://nvd.nist.gov/vuln/detail/CVE-2022-39402)
Live chat
Online