Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Remediation

References

CVE-2020-2922

Related Vulnerabilities

PHP Resource Management Errors Vulnerability (CVE-2010-1917)

XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-23620)

WordPress Plugin WooCommerce Predictive Search Cross-Site Scripting (1.0.5)

WordPress Plugin WP PRO Advertising System-All In One Ad Manager SQL Injection (4.6.18)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-28347)

Severity

Low

Classification

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2020-2922