CVE-2000-0045
CVSS 2.0 Score 6.4 of 10 (medium)
Details
Summary
CVE-2000-0045 is a vulnerability affecting MySQL servers where local users are able to modify passwords for other MySQL user accounts. This issue arises due to a lack of sufficient access controls for the GRANT privilege. An attacker who has local access to the MySQL server can exploit this vulnerability to gain unauthorized access to other user accounts by resetting their passwords. This poses a significant security risk, as an attacker could potentially gain elevated privileges or take control of sensitive data stored in the database. It is recommended that affected MySQL servers be updated to a patched version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL
Affected Vendors
- BonqDAO