Description
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.
Remediation
References
Related Vulnerabilities
WordPress Plugin KBoard Multiple Vulnerabilities (3.3)
WordPress Plugin Malware Scanner Privilege Escalation (4.7.2)
WordPress Plugin Filedownload Multiple Vulnerabilities (1.4)
WordPress Plugin Subscribe To Comments Reloaded Multiple Vulnerabilities (140204)
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2022-23181)