CVE-2021-2007 | Vulnetix

CVE-2021-2007 PUBLISHED CVSS 3.700000047683716 LOW

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

EPSS 2.26% · 82.3th percentile

Risk Scores

CVSS 3.1

3.700000047683716

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

2.26%

82.3th percentile

Affected Products

Vendor	Product	Versions
Bitnami	mariadb-min	10.3.0, 10.2.0, 10.3.0
Bitnami	mysql-client	10.4.0, 10.1.0, 10.2.0
Bitnami	mariadb	5.5.0, 10.3.0, 10.4.0
Bitnami	mariadb-min	10.3.0, 10.1.0, 10.2.0
Bitnami	mariadb	10.3.0, 5.5.0, 10.2.0
Bitnami	mysql-client	10.1.0, 10.2.0, 10.3.0

Timeline

Nov 5, 2019 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 25, 2021 EPSS Score
Dec 29, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 1, 2022 EPSS Score
May 3, 2022 EPSS Score
Jul 5, 2022 EPSS Score
Sep 7, 2022 EPSS Score
Nov 9, 2022 EPSS Score

References

Open in Interactive Console →