CVE-2021-35640: 
MySQL vulnerability analysis and mitigation

A vulnerability was identified in the MySQL Server product of Oracle MySQL, specifically in the Server: DDL component. The vulnerability affects MySQL versions 8.0.26 and prior. This vulnerability (CVE-2021-35640) allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (NVD, Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 2.7 (LOW) with a vector string of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N. This indicates that the vulnerability requires network access and high privileges to exploit, but does not require user interaction. The scope is unchanged, and the impact primarily affects data integrity with low severity (Oracle CPU, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. The impact is limited to integrity with no direct effects on confidentiality or availability (NVD).

The vulnerability is described as easily exploitable but requires high privileges and network access via multiple protocols. The attacker must have valid authentication credentials to exploit this vulnerability (NVD).

Oracle has released patches to address this vulnerability in their October 2021 Critical Patch Update. Users should upgrade to the latest version of MySQL Server. The vulnerability has been fixed in versions after MySQL 8.0.26 (Oracle CPU).