Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-21592

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.7.39 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Published

2022-10-18T21:15:11.303

Last Modified

2024-11-21T06:45:01.573

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oracle	mysql	≤ 5.7.39	Yes
Application	oracle	mysql	≤ 8.0.29	Yes
Application	netapp	oncommand_insight	-	Yes
Application	netapp	oncommand_workflow_automation	-	Yes

References

https://security.netapp.com/advisory/ntap-20221028-0013/ Third Party Advisory ([email protected])
https://www.oracle.com/security-alerts/cpuoct2022.html Patch, Vendor Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20221028-0013/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2022.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)