CVE-2019-2922

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.6.45 and prior MySQL Server versions 5.7.27 and prior

Description The issue is related to a lack of protection for service data in the MySQL Server product, specifically in the Server: Security: Encryption component. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized read access to a subset of MySQL Server accessible data.

Recommendations For MySQL Server versions 5.6.45 and prior, update to a version later than 5.6.45 to resolve the issue. For MySQL Server versions 5.7.27 and prior, update to a version later than 5.7.27 to resolve the issue. As a temporary workaround, consider restricting network access to the MySQL Server to minimize the risk of exploitation.