CVE-2018-3286

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:05

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/105607 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105607 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1041888 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1041888 - Third Party Advisory, VDB Entry
References () https://security.netapp.com/advisory/ntap-20181018-0002/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20181018-0002/ - Third Party Advisory

Information

Published : 2018-10-17 01:31

Updated : 2024-11-21 04:05


NVD link : CVE-2018-3286

Mitre link : CVE-2018-3286

CVE.ORG link : CVE-2018-3286


JSON object : View

Products Affected

netapp

  • oncommand_unified_manager
  • storage_automation_store
  • oncommand_insight
  • snapcenter
  • oncommand_workflow_automation

oracle

  • mysql

microsoft

  • windows