Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

An update of the mysql package has been released.

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21483 advisory.

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported     versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior.
    Difficult to exploit vulnerability allows high privileged attacker with access to the physical     communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL     Cluster. Successful attacks require human interaction from a person other than the attacker. Successful     attacks of this vulnerability can result in takeover of MySQL Cluster. (CVE-2022-21483)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204076	Photon OS 3.0: Mysql PHSA-2022-3.0-0415	Nessus	PhotonOS Local Security Checks	medium
203217	Photon OS 4.0: Mysql PHSA-2022-4.0-0187	Nessus	PhotonOS Local Security Checks	medium
173604	CBL Mariner 2.0 Security Update: mysql (CVE-2022-21483)	Nessus	MarinerOS Local Security Checks	medium

Detections

Analytics

CVE-2022-21483

medium

Tenable Plugins

medium

medium

medium