https://bugzilla.redhat.com/show_bug.cgi?id=2020583
Bug ID: 2020583
Summary: CVE-2021-2471 mysql-connector-java: unauthorized
access to critical
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, asoldano(a)redhat.com,
atangrin(a)redhat.com, bbaranow(a)redhat.com,
bbuckingham(a)redhat.com, bcourt(a)redhat.com,
bibryam(a)redhat.com, bkearney(a)redhat.com,
bmaxwell(a)redhat.com, bmontgom(a)redhat.com,
brian.stansberry(a)redhat.com, btotty(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
darran.lofthouse(a)redhat.com,
databases-maint(a)redhat.com, dkreling(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
ehelms(a)redhat.com, eleandro(a)redhat.com,
eparis(a)redhat.com, etirelli(a)redhat.com,
fjuma(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, gmorling(a)redhat.com,
hbraun(a)redhat.com, hhorak(a)redhat.com, ibek(a)redhat.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jjanco(a)redhat.com,
jnethert(a)redhat.com, jochrist(a)redhat.com,
jokerman(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jpechane(a)redhat.com,
jperkins(a)redhat.com, jrokos(a)redhat.com,
jschatte(a)redhat.com, jsherril(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com,
ljavorsk(a)redhat.com, lzap(a)redhat.com,
mhulan(a)redhat.com, mkulik(a)redhat.com,
mmccune(a)redhat.com, mmuzila(a)redhat.com,
mnovotny(a)redhat.com, mschorm(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
myarboro(a)redhat.com, nmoumoul(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
odubaj(a)redhat.com, orabin(a)redhat.com,
pantinor(a)redhat.com, pcreech(a)redhat.com,
pdelbell(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, puntogil(a)libero.it,
rchan(a)redhat.com, rguimara(a)redhat.com,
rrajasek(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, smaestri(a)redhat.com,
sponnaga(a)redhat.com, steve.traylen(a)cern.ch,
tbrisker(a)redhat.com, tom.jenkinson(a)redhat.com,
tzimanyi(a)redhat.com, xjakub(a)fi.muni.cz,
yborgess(a)redhat.com, zmiklank(a)redhat.com
Target Milestone: ---
Classification: Other
Difficult to exploit vulnerability allows high privileged attacker with network
access via multiple protocols to compromise MySQL Connectors. Successful
attacks of this vulnerability can result in unauthorized access to critical
data or complete access to all MySQL Connectors accessible data and
unauthorized ability to cause a hang or frequently repeatable crash.
External Reference:
https://www.oracle.com/security-alerts/cpuoct2021.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2020583