Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-2922 - Vulnerability Database
MySQL

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2020-2922

Low
Reference: CVE-2020-2922
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-2922
Title: MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).