CVE-2019-2969 PUBLISHED

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

EPSS 0.38% · 59.0th percentile

Risk Scores

EPSS Score
0.38%
59.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSmysql-5.75.7.27-0ubuntu0.18.04.1, 5.7.26-0ubuntu0.18.04.1, 5.7.25-0ubuntu0.18.04.2
Ubuntu:16.04:LTSpercona-xtradb-cluster-5.65.6.37-26.21-0ubuntu0.16.04.2, 5.6.37-26.21-0ubuntu0.16.04.1, 5.6.34-26.19-0ubuntu0.16.04.2
Ubuntu:14.04:LTSmysql-5.55.5.57-0ubuntu0.14.04.1, 5.5.58-0ubuntu0.14.04.1, 5.5.59-0ubuntu0.14.04.1
Ubuntu:16.04:LTSpercona-server-5.60, 5.6.22-rel71.0-0ubuntu2, 5.6.22-rel71.0-0ubuntu4
Ubuntu:20.04:LTSmysql-8.00, 8.0.17-0ubuntu2, 8.0.17-0ubuntu3
Ubuntu:16.04:LTSmysql-5.75.7.11-0ubuntu6, 5.7.11-0ubuntu5, 5.7.11-0ubuntu4

Timeline

References

Open in Interactive Console →