CVE-2019-2533

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.13 and prior

Description The issue is related to errors in access control within the Server component of Oracle MySQL. It allows a remote attacker to gain unauthorized access to protected data using network protocols. Successful attacks can result in unauthorized creation, deletion, or modification of critical data or all accessible data on the MySQL Server. The vulnerability can be easily exploited by an attacker with network access via multiple protocols.

Recommendations For versions 8.0.13 and prior, update to a version that includes the fix for this issue to prevent unauthorized access and potential data modification. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation. Restrict privileges to the minimum required for each user to reduce the impact of a potential attack.