CVE-2000-0045

CVSS 2.0 Score 6.4 of 10 (medium)

Details

Published Jan 11, 2000
Updated: Nov 20, 2024

Summary

CVE-2000-0045 is a vulnerability affecting MySQL servers where local users are able to modify passwords for other MySQL user accounts. This issue arises due to a lack of sufficient access controls for the GRANT privilege. An attacker who has local access to the MySQL server can exploit this vulnerability to gain unauthorized access to other user accounts by resetting their passwords. This poses a significant security risk, as an attacker could potentially gain elevated privileges or take control of sensitive data stored in the database. It is recommended that affected MySQL servers be updated to a patched version as soon as possible to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share