CVE-2024-21243: 
MySQL vulnerability analysis and mitigation

A vulnerability has been identified in Oracle MySQL Server's Telemetry component (CVE-2024-21243). The vulnerability affects MySQL Server versions 8.4.2 and prior, as well as 9.0.1 and prior. This security issue requires a high-privileged attacker with network access via multiple protocols to exploit (Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 2.2 (Low severity) with the following vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N. This scoring indicates that the vulnerability requires network access, has high attack complexity, requires high privileges, needs no user interaction, has unchanged scope, and can only impact confidentiality at a low level, with no impact on integrity or availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. The impact is limited to confidentiality, with no effects on system integrity or availability (Oracle CPU).

Oracle has addressed this vulnerability in their October 2024 Critical Patch Update. Users are advised to update to versions newer than 8.4.2 or 9.0.1 as appropriate for their deployment (Oracle CPU).