CVE-2022-21287: 
MySQL vulnerability analysis and mitigation

CVE-2022-21287 is a vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). The vulnerability affects versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. It is classified as a difficult-to-exploit vulnerability with a CVSS 3.1 Base Score of 6.3 (Medium) (Oracle Advisory, NetApp Advisory).

The vulnerability requires a high-privileged attacker with access to the physical communication segment attached to the hardware where MySQL Cluster executes. Successful exploitation requires human interaction from someone other than the attacker. The CVSS Vector is (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H), indicating adjacent network access, high attack complexity, high privileges required, and user interaction needed (Oracle Advisory).

Successful exploitation of this vulnerability can result in complete takeover of MySQL Cluster, potentially affecting the confidentiality, integrity, and availability of the system (Oracle Advisory, ZDI Advisory).

Oracle has released security patches to address this vulnerability. Users should update to the latest version of MySQL Cluster that contains the fix. The vulnerability was addressed in Oracle's January 2022 Critical Patch Update (Oracle Advisory).