PT-2017-11265
CVE-2017-10277
·
Published
2017-10-19
·
Updated
2019-10-03
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle MySQL Connector/Net versions 6.9.9 and earlier
Description
The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, requiring human interaction from a person other than the attacker. Successful attacks can result in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data, as well as unauthorized read access to a subset of MySQL Connectors' accessible data.
Recommendations
For versions 6.9.9 and earlier, update to a version later than 6.9.9 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾