The version of Oracle MySQL Workbench installed on the remote Windows host is prior to 8.0.27. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory.

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks of this     vulnerability can result in unauthorized access to critical data or complete access to all MySQL Workbench     accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Workbench. (CVE-2021-3712)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (libxml2)). Supported     versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL     Workbench. (CVE-2021-3518)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench. Successful attacks of this vulnerability     can result in unauthorized access to critical data or complete access to all MySQL Workbench accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Workbench

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle MySQL Workbench < 8.0.27 Multiple Vulnerabilities (Oct 2021)

high Nessus Plugin ID 154655

Version 1.7

Version 1.6

Version 1.5

Version 1.7 Nov 27, 2023, 1:55 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202311271355
Version 1.6 Nov 2, 2023, 4:31 AM IAVM reference Plugin Feed: 202311020431
Version 1.5 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254