
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-21887 is a critical vulnerability affecting MySQL Server versions 8.0.31 and prior. The vulnerability was disclosed in January 2023 and allows high-privileged attackers with network access to compromise MySQL Server through multiple protocols (Oracle CPU Jan 2023, NVD).
The vulnerability is classified as easily exploitable and requires network access via multiple protocols to compromise MySQL Server. The vulnerability has been assigned a high severity rating, indicating its potential for significant impact on affected systems (Oracle CPU Jan 2023).
A successful exploitation of this vulnerability could lead to a complete compromise of the MySQL Server, potentially affecting the confidentiality, integrity, and availability of the database system (Oracle CPU Jan 2023).
Oracle has released security patches to address this vulnerability in their January 2023 Critical Patch Update. Users are strongly advised to update their MySQL Server installations to versions newer than 8.0.31. For Ubuntu users, MySQL has been updated to version 8.0.32 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10, while Ubuntu 18.04 LTS has been updated to MySQL 5.7.41 (Broadcom Support).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."