CVE-2017-3306
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Enterprise Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Enterprise Monitor accessible data as well as unauthorized access to critical data or complete access to all MySQL Enterprise Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L).
Vulnerabilidad en el componente MySQL Enterprise Monitor de Oracle MySQL (subcomponente: Monitoreng: Server). Las versiones compatibles que están afectadas son 3.1.6.8003 y versiones anteriores, 3.2.1182 y versiones anteriores y 3.3.2.1162 y versiones anteriores. La vulnerabilidad fácilmente "explotable" permite a un atacante altamente privilegiado con acceso a la red comprometer MySQL Enterprise Monitor a través de múltiples protocolos. Los ataques exitosos requieren interacción humana de una persona diferente al atacante y mientras la vulnerabilidad esté en MySQL Enterprise Monitor, los ataques pueden impactar significativamente productos adicionales. Los ataques exitosos de esta vulnerabilidad pueden resultar en creación, borrado o modificación de acceso no autorizado a datos críticos o a todos los datos accesibles de MySQL Enterprise Monitor así como acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Enterprise Monitor y capacidad no autorizada para provocar una denegación de servicio parcial (DOS parcial) de MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.3 (Impactos de Confidencialidad, Integridad y Disponibilidad). Vector CVSS (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L).
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2016-12-06 CVE Reserved
- 2017-04-24 CVE Published
- 2023-03-07 EPSS Updated
- 2024-10-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/97724 | Third Party Advisory | |
http://www.securitytracker.com/id/1038287 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html | 2019-10-03 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Mysql Enterprise Monitor Search vendor "Oracle" for product "Mysql Enterprise Monitor" | >= 3.1.0 <= 3.1.6.8003 Search vendor "Oracle" for product "Mysql Enterprise Monitor" and version " >= 3.1.0 <= 3.1.6.8003" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Mysql Enterprise Monitor Search vendor "Oracle" for product "Mysql Enterprise Monitor" | >= 3.2.0 <= 3.2.1182 Search vendor "Oracle" for product "Mysql Enterprise Monitor" and version " >= 3.2.0 <= 3.2.1182" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Mysql Enterprise Monitor Search vendor "Oracle" for product "Mysql Enterprise Monitor" | >= 3.3.0 <= 3.3.2.1162 Search vendor "Oracle" for product "Mysql Enterprise Monitor" and version " >= 3.3.0 <= 3.3.2.1162" | - |
Affected
|