CVE-2021-2019 — Oracle Mysql vulnerability

44 documents11 sources
Severity
2.7LOWNVD
EPSS
0.3%
top 48.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle MysqlOracle Corporation Mysql ServerFedoraproject Fedora
Timeline
PublishedJan 20
Latest updateMay 24

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:NExploitability: 1.2 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5oracle_corporation/mysql_server8.0.19 and prior
▶NVDoracle/mysql8.0.0 — 8.0.19

Also affects: Fedora 32, 33

🔴Vulnerability Details

3
GHSA
GHSA-c7h9-w7hr-wpgq: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)↗2022-05-24
▶
CVEList
CVE-2021-2019: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)↗2021-01-20
▶
OSV
CVE-2021-2019: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)↗2021-01-20
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle Hyperion Risk Matrix: Hyperion Planning (jQuery) — CVE-2019-11358↗2021-10-15
▶
Oracle
Oracle Oracle Financial Services Applications Risk Matrix: Onboarding (Apache PDFbox) — CVE-2019-0228↗2021-07-15
▶
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Enterprise Manager Install (Nimbus JOSE+JWT) — CVE-2019-17195↗2021-04-15
▶
Red Hat
mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2021)↗2021-01-19
▶
Oracle
Oracle Oracle MySQL Risk Matrix: Server: Security: Privileges — CVE-2021-2019↗2021-01-15
▶

🕵️Threat Intelligence

3
Sentinelone
CVE-2021-45608 | NetUSB RCE Flaw in Millions of End User Routers↗2022-01-11
▶
Crowdstrike
Adversary Quest 2021: 4 CATAPULT SPIDER eCrime Challenges↗
▶
Crowdstrike
RSA Conference 2021: Action Recap↗
▶
CVE-2021-2019 — Oracle Mysql vulnerability | cvebase