https://bugzilla.redhat.com/show_bug.cgi?id=1444406
Bug ID: 1444406
Summary: CVE-2017-3586 mysql-connector-java: Connector/J
unspecified vulnerability (CPU Apr 2017)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
avibelli(a)redhat.com, chazlett(a)redhat.com,
coneill(a)redhat.com, databases-maint(a)redhat.com,
gsterlin(a)redhat.com, gvarsami(a)redhat.com,
hhorak(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jbalunas(a)redhat.com, jcoleman(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
kseifried(a)redhat.com, ldimaggi(a)redhat.com,
mmuzila(a)redhat.com, mschorm(a)redhat.com,
nwallace(a)redhat.com, puntogil(a)libero.it,
rrajasek(a)redhat.com, rwagner(a)redhat.com,
tcunning(a)redhat.com, tiwillia(a)redhat.com,
tjay(a)redhat.com, tkirby(a)redhat.com, xjakub(a)fi.muni.cz
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent:
Connector/J). Supported versions that are affected are 5.1.41 and earlier.
Easily exploitable vulnerability allows low privileged attacker with network
access via multiple protocols to compromise MySQL Connectors. While the
vulnerability is in MySQL Connectors, attacks may significantly impact
additional products. Successful attacks of this vulnerability can result in
unauthorized update, insert or delete access to some of MySQL Connectors
accessible data as well as unauthorized read access to a subset of MySQL
Connectors accessible data.
External References:
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.ht...
--
You are receiving this mail because:
You are on the CC list for the bug.