CVE-2022-39403: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. The vulnerability allows low privileged attackers with logon access to the infrastructure where MySQL Shell executes to compromise MySQL Shell, requiring human interaction from a person other than the attacker (Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 3.9 (LOW) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N. This indicates a local attack vector, low attack complexity, requiring low privileges and user interaction, with unchanged scope, and low impacts on confidentiality and integrity but no impact on availability (Oracle CPU).

Successful exploitation can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data (Oracle CPU).

Oracle has released patches to address this vulnerability. Users should upgrade to the latest version of MySQL Shell that is greater than version 8.0.30 (Oracle CPU).