CVE-2006-0369Sensitive Information Exposure in Oracle Mysql

Severity
2.1LOWNVD
EPSS
0.1%
top 64.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 22
Latest updateMay 1

Description

MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

NVDoracle/mysql5.0.18

🔴Vulnerability Details

1
GHSA
GHSA-wq2p-hcf7-x7cq: ** DISPUTED ** MySQL 52022-05-01