CVE-2022-21245: 
MySQL vulnerability analysis and mitigation

CVE-2022-21245 is a vulnerability in the MySQL Server product of Oracle MySQL, specifically affecting the Server: Security: Privileges component. The vulnerability affects MySQL versions 5.7.36 and prior, and 8.0.27 and prior. This vulnerability was disclosed as part of Oracle's January 2022 Critical Patch Update (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.3 (Medium severity) with a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. This indicates that the vulnerability is easily exploitable by a low-privileged attacker with network access via multiple protocols (NVD, NetApp Advisory).

Successful exploitation of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. The vulnerability affects the integrity of the system but does not impact confidentiality or availability (Oracle Advisory).

Oracle has released patches to address this vulnerability in MySQL versions. Users are advised to upgrade to MySQL 8.0.28 for version 8.0 installations, and MySQL 5.7.37 for version 5.7 installations. The fixes are available through the January 2022 Critical Patch Update (Ubuntu Notice, Fedora Update).