MySQL improper permission revocation
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | |||
| mysql-0:4.1.22-2.el4 | cpe:/o:redhat:enterprise_linux:4 | RHSA-2008:0768 | 2008-07-24T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| mysql-0:5.0.45-7.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2008:0364 | 2008-05-20T00:00:00Z |
| Red Hat Web Application Stack for RHEL 4 | |||
| mysql-0:5.0.30-1.el4s1.1 | cpe:/a:redhat:rhel_application_stack:1 | RHSA-2007:0083 | 2007-02-19T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2006-4024 | MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy. |
Ubuntu USN |
USN-338-1 | MySQL vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 1.7% (1.736% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|