TROYANOSYVIRUS
Zuruck zu CVEs

CVE-2020-14663

HIGH
7.2

Beschreibung

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVE Details

CVSS v3.1 Bewertung7.2
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienHIGH
BenutzerinteraktionNONE
Veroffentlicht7/15/2020
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

canonical:ubuntu_linuxnetapp:active_iq_unified_managernetapp:oncommand_insightnetapp:oncommand_workflow_automationnetapp:snapcenteroracle:mysql

Referenzen

https://usn.ubuntu.com/4441-1/(secalert_us@oracle.com)
https://security.gentoo.org/glsa/202105-27(af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20200717-0004/(af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/4441-1/(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujul2020.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.