https://bugzilla.redhat.com/show_bug.cgi?id=2047343

Bug ID: 2047343 Summary: CVE-2022-21363 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: aileenc@redhat.com, alazarot@redhat.com, anstephe@redhat.com, aos-bugs@redhat.com, asoldano@redhat.com, atangrin@redhat.com, avibelli@redhat.com, bbaranow@redhat.com, bbuckingham@redhat.com, bcourt@redhat.com, bgeorges@redhat.com, bibryam@redhat.com, bmaxwell@redhat.com, bmontgom@redhat.com, brian.stansberry@redhat.com, btotty@redhat.com, cdewolf@redhat.com, chazlett@redhat.com, clement.escoffier@redhat.com, dandread@redhat.com, darran.lofthouse@redhat.com, databases-maint@redhat.com, dkreling@redhat.com, dosoudil@redhat.com, drieden@redhat.com, ehelms@redhat.com, eleandro@redhat.com, emingora@redhat.com, eparis@redhat.com, etirelli@redhat.com, fjuma@redhat.com, ggaughan@redhat.com, gmalinko@redhat.com, gmorling@redhat.com, gsmet@redhat.com, hamadhan@redhat.com, hbraun@redhat.com, hhorak@redhat.com, ibek@redhat.com, iweiss@redhat.com, janstey@redhat.com, java-sig-commits@lists.fedoraproject.org, jburrell@redhat.com, jjanco@redhat.com, jnethert@redhat.com, jochrist@redhat.com, jokerman@redhat.com, jolee@redhat.com, jpallich@redhat.com, jpechane@redhat.com, jperkins@redhat.com, jrokos@redhat.com, jschatte@redhat.com, jsherril@redhat.com, jstastny@redhat.com, jwon@redhat.com, krathod@redhat.com, kverlaen@redhat.com, kwills@redhat.com, lgao@redhat.com, ljavorsk@redhat.com, lthon@redhat.com, lzap@redhat.com, mhulan@redhat.com, mkulik@redhat.com, mmccune@redhat.com, mmuzila@redhat.com, mnovotny@redhat.com, mschorm@redhat.com, msochure@redhat.com, msvehla@redhat.com, mszynkie@redhat.com, myarboro@redhat.com, nmoumoul@redhat.com, nstielau@redhat.com, nwallace@redhat.com, odubaj@redhat.com, orabin@redhat.com, pantinor@redhat.com, pcreech@redhat.com, pdelbell@redhat.com, peholase@redhat.com, pgallagh@redhat.com, pjindal@redhat.com, pmackay@redhat.com, probinso@redhat.com, puntogil@libero.it, rchan@redhat.com, rguimara@redhat.com, rrajasek@redhat.com, rruss@redhat.com, rstancel@redhat.com, rsvoboda@redhat.com, sbiarozk@redhat.com, sd-operator-metering@redhat.com, sdouglas@redhat.com, smaestri@redhat.com, sponnaga@redhat.com, steve.traylen@cern.ch, tflannag@redhat.com, tom.jenkinson@redhat.com, tzimanyi@redhat.com, xjakub@fi.muni.cz, yborgess@redhat.com, zmiklank@redhat.com Target Milestone: --- Classification: Other

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Reference: https://www.oracle.com/security-alerts/cpujan2022.html