PT-2017-11265

CVE-2017-10277

·

Published

2017-10-19

·

Updated

2019-10-03

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 6.9.9 and earlier
Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, requiring human interaction from a person other than the attacker. Successful attacks can result in unauthorized update, insert, or delete access to some of MySQL Connectors' accessible data, as well as unauthorized read access to a subset of MySQL Connectors' accessible data.
Recommendations For versions 6.9.9 and earlier, update to a version later than 6.9.9 to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾