CVE-2021-2301: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) affects versions 8.0.23 and prior. This easily exploitable vulnerability allows high privileged attackers with network access via multiple protocols to compromise MySQL Server. The vulnerability was disclosed in April 2021 as part of Oracle's Critical Patch Update (Oracle CPU).

The vulnerability has been assigned a CVSS v3.1 Base Score of 2.7 (Low severity) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N. The scoring indicates that the vulnerability requires network access, is low complexity to exploit, requires high privileges, needs no user interaction, has unchanged scope, and can only impact confidentiality at a low level with no impact on integrity or availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. The impact is limited to confidentiality breaches with no effect on system integrity or availability (Oracle CPU).

The vulnerability is considered easily exploitable but requires high privileged access with network connectivity. The attacker needs to have valid authentication credentials to exploit this vulnerability via multiple protocols (NVD).

Oracle has released security patches to address this vulnerability in MySQL version 8.0.25. Users are strongly recommended to update their MySQL installations to the latest version. For systems that cannot be immediately updated, ensuring strict access control to privileged accounts is essential (Oracle CPU, NetApp Advisory).