CVE-2024-21262

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-21262
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpuoct2024.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:mysql:9.0.0:*:*:*:*:*:*:*
History

21 Oct 2024, 16:28

Type Values Removed Values Added
First Time Oracle mysql
Oracle
CPE cpe:2.3:a:oracle:mysql:9.0.0:*:*:*:*:*:*:*
References () https://www.oracle.com/security-alerts/cpuoct2024.html - () https://www.oracle.com/security-alerts/cpuoct2024.html - Vendor Advisory
CWE NVD-CWE-noinfo

16 Oct 2024, 15:35

Type Values Removed Values Added
CWE CWE-863
Summary
  • (es) Vulnerabilidad en el producto MySQL Connectors de Oracle MySQL (componente: Connector/ODBC). Las versiones compatibles afectadas son 9.0.0 y anteriores. Esta vulnerabilidad, que se puede explotar fácilmente, permite que un atacante no autenticado con acceso a la red a través de múltiples protocolos ponga en peligro MySQL Connectors. Los ataques exitosos de esta vulnerabilidad pueden dar como resultado actualizaciones, inserciones o eliminaciones no autorizadas de algunos datos accesibles de MySQL Connectors y la capacidad no autorizada de provocar una denegación de servicio parcial (DOS parcial) de MySQL Connectors. Puntuación base de CVSS 3.1: 6,5 (impactos en la integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

15 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-15 20:15

Updated : 2024-10-21 16:28

NVD link : CVE-2024-21262

Mitre link : CVE-2024-21262

CVE.ORG link : CVE-2024-21262

JSON object : View

Products Affected

oracle

  • mysql
CWE
NVD-CWE-noinfo CWE-863

Incorrect Authorization