3.1
CVSSv3

CVE-2023-22048

Published: 18/07/2023 Updated: 30/10/2023
CVSS v3 Base Score: 3.1 | Impact Score: 1.4 | Exploitability Score: 1.6
VMScore: 0

Vulnerability Summary

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql server

fedoraproject fedora 37

fedoraproject fedora 38

fedoraproject fedora 39

netapp snapcenter -

netapp oncommand workflow automation -

netapp oncommand insight -

netapp active iq unified manager -

Vendor Advisories

Debian Bug report logs - #1041819 mysql-80: CVE-2023-22058 CVE-2023-22057 CVE-2023-22056 CVE-2023-22054 CVE-2023-22053 CVE-2023-22048 CVE-2023-22046 CVE-2023-22038 CVE-2023-22033 CVE-2023-22008 CVE-2023-22007 CVE-2023-22005 CVE-2023-21950 Package: src:mysql-80; Maintainer for src:mysql-80 is Debian MySQL Maintainers <pkg-mysql-maint ...
DescriptionThe MITRE CVE dictionary describes this issue as: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Supported versions that are affected are 8033 and prior Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server ...