Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2006-0369 - Vulnerability Database
MySQL

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2006-0369

Low
Reference: CVE-2006-0369
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-0369
Title: MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

DISPUTED MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the quotSELECT FROM information_schema.viewsquot query which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties saying that the availability of the schema is a normal and sometimes desired aspect of database access.