medium4.9
CVE-2015-2575
Improper Access Control in MySQL Connectors Java
Impact
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | mysql:mysql-connector-java | < 5.1.35 | 5.1.35 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 8.0 |
| Suse | Linux Enterprise Desktop | Version 11 |
| Suse | Linux Enterprise Server | Version 11 |
| Suse | Linux Enterprise Software Development Kit | Version 11 |
| Mysql | Mysql | through 5.1.34 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00089.html
- http://www.debian.org/security/2016/dsa-3621
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://www.securityfocus.com/bid/74075
- http://www.securitytracker.com/id/1032121
- https://security.netapp.com/advisory/ntap-20150417-0003/
- https://github.com/advisories/GHSA-gc43-g62c-99g2
- https://nvd.nist.gov/vuln/detail/CVE-2015-2575