CVE-2022-39403
published 2022-10-18CVE-2022-39403: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily…
PriorityP412low3.9CVSS 3.1
AVLACLPRLUIRSUCLILAN
EPSS
0.42%
34.1th percentile
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| msrc | cbl2_mysql_8.0.31-1_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_mysql_8.0.31-1_on_cbl_mariner_1.0 | — | — |
| oracle | mysql | 8.0 – 8.0.30 | — |
| oracle_corporation | mysql_server | — | — |
CVSS provenance
nvdv3.13.9LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
osv3.9LOW
vendor_msrc3.9LOW
vendor_oracle3.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c5qf-2g36-c4r9: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
ghsa_unreviewed·2022-10-19
CVE-2022-39403 [LOW] GHSA-c5qf-2g36-c4r9: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).
OSV
CVE-2022-39403: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
osv·2022-10-18·CVSS 3.9
CVE-2022-39403 [LOW] CVE-2022-39403: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).
Oracle
Oracle Oracle MySQL Risk Matrix: Shell: Core Client — CVE-2022-39403
vendor_oracle·2022-10-15·CVSS 3.9
CVE-2022-39403 [LOW] Oracle Oracle MySQL Risk Matrix: Shell: Core Client — CVE-2022-39403
Oracle Oracle MySQL Risk Matrix: Shell: Core Client vulnerability
CVE: CVE-2022-39403
CVSS: 3.9
Protocol: None
Remote exploit: No
Affected versions: Local
Advisory: cpuoct2022 (OCT 2022)
Microsoft
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privile
vendor_msrc·2022-10-11·CVSS 3.9
CVE-2022-39403 [LOW] Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privile
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).
FAQ: Is Azure Linux the only Microsoft product that includes this open-
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-18
Published