CVE-2017-3586: Medium severity ORACLE MySQL Connectors vulnerability
An unspecified vulnerability in Oracle MySQL related to the Connectors Connector/J component could allow an authenticated attacker to cause low confidentiality impact, low integrity impact, and no availability impact.
Other sources
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.0 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (MySQL Connectors component: Connector/J)to a version that resolves this vulnerability.Fixed in 5.1.41
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3586?
CVE-2017-3586 is considered a low-severity vulnerability that could be exploited by attackers with low privileges.
How do I fix CVE-2017-3586?
To fix CVE-2017-3586, upgrade your MySQL Connectors to version 5.1.42 or later.
Who is affected by CVE-2017-3586?
Users of MySQL Connectors versions 5.1.41 and earlier are affected by CVE-2017-3586.
What type of attack vector is used in CVE-2017-3586?
CVE-2017-3586 can be exploited via network access using multiple protocols.
What component is vulnerable in CVE-2017-3586?
The vulnerable component in CVE-2017-3586 is the MySQL Connectors, specifically the Connector/J.